<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="828">
<package pkgid="effd81cfee3349ebc86ef4651be29d99e9a31148364c3373d0738c787c5037a2" name="Leap-Micro-release" arch="x86_64">
  <version epoch="0" ver="5.2" rel="150300.5.3"/>
</package>
<package pkgid="9672a6a4144d02267306af3d77085470be77f6d890620a640ae67b79ef448d12" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="3.52.1"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
</package>
<package pkgid="c08fd801b5f4376f3fe85691da5c590a8b4fe655ae1d8dd77c7bff773bfd2692" name="acl" arch="x86_64">
  <version epoch="0" ver="2.2.52" rel="4.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- add acl-2.2.52-tests.patch and enable tests, check section taken
  from Fedora package</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="jeffm@suse.com" date="1449057600">- Update to git snapshot dated 21 Sep 2015.
  - Added:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
- Signficant spec file restructuring due to 0013-modernize-build-system.patch
- removed builddefs.in.diff</changelog>
  <changelog author="kukuk@suse.de" date="1489406400">- Add BuildRequires for system user bin needed by test suite</changelog>
  <changelog author="fvogt@suse.com" date="1490788800">- Make it possible to disable tests (for Ring0)
- Add BuildRequires: system-user-daemon for the testsuite</changelog>
  <changelog author="hendrikw@arcor.de" date="1492430400">- reenable full Larg File Support for i586</changelog>
  <changelog author="jengelh@inai.de" date="1492948800">- Remove --with-pic that's just for static libraries.
- Replace %__-type macro indirections.
  Replace old $RPM_ by their macro equivalents for consistency.
  Make the macro style consistent across the file again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- test: Add helper library to fake passwd/group files
- quote: escape literal backslashes (bsc#953659).
- Added patch:
  * 0001-test-Add-helper-library-to-fake-passwd-group-files.patch
  * 0002-quote-escape-literal-backslashes.patch</changelog>
</package>
<package pkgid="cfe547ccfb37f0612f0b7626822734c361d5a20594c8f7457500a87df17e3198" name="adwaita-icon-theme" arch="noarch">
  <version epoch="0" ver="3.34.3" rel="2.72"/>
  <changelog author="bjorn.lie@gmail.com" date="1542715200">- Update to version 3.30.1:
  + Fix nasty misrendering of inode-directory-symbolic.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 3.31.1:
  + few symbolic updates
  + move a lot of fullcolor icons to legacy context. They will go
    or be updated in 2 releases.
  - symbolic: lists
  - fullcolor: more app, device, mimetypes to legacy</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + symbolic:
  - folder-download, inode-directory
  - privacy, dnd, phone device icons
  - new ui context for things that aren't strictly icons. Might
    go into gtk
  - emoji category tweaks
  - mail-reply, battery status
  - action icons eg rotation
  - drive icon tweaks
  + fullcolor:
  - more app/mimetype/device/status to legacy
  - new style for fullcolor icons - folders, mimetypes and
    devices
  + cursors: fix a symlink mixup.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552910400">- Update to version 3.32.0:
  + No changes, stable version update only.</changelog>
  <changelog author="luke@ljones.dev" date="1567857600">- Update to version 3.33.92:
  + symbolic:
  - send-to metaphor.
  - battery-missing-symbolic.
  - pixel perfect question mark.
  - mail-attachment metrics.
  - view-reveal, view-conceal for passwords.
  - keyboard.
  - folders as inode.
  - orientation icons.
  - touch-disabled.
  - weather-tornado.
  - battery level icons.
  + fullcolor: colorful packages.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568289600">- Update to version 3.34.0:
  + Fullcolor: update media-optical to the new style.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570881600">- Update to version 3.34.0+13:
  + Symbolic:
  - refined preferences-system-parental-controls
  - add preferences-system-parental-controls
  - fix missized copy icon; fix stroke in folder-new
  - view-more use circles
  - be less clever in the document icons
  - refine clear icons; retire brush metaphor for clear-all
  - refine alarm shape
- Switch to git checkout, explicit commit from master branch.
  Following this, add libtool BuildRequires and pass autogen.sh,
  needed to boostrap since we are now using a checkout.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572868800">- Update to version 3.34.1:
  + Symbolic:
  - propegate the checkmark refinements.
  - slightly smaller media-eject.
  - centre alignment for go-next/previous.
  - add ! to battery level 0.
  - missing classes for battery icons.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573214400">- Update to version 3.34.3:
  + Fullcolor: trash icons.
  + Symbolic:
  - rotation lock.
  - battery icons.
- Changes from version 3.34.2:
  + Fullcolor: visible folder-documents.</changelog>
  <changelog author="fcrozat@suse.com" date="1574769600">- Ensure we have a recent enough version of gtk3-tools to build
  the package.</changelog>
</package>
<package pkgid="4066db6ff61e4c60c7021909eddfb10480b1ab2653d445f04e3623a7f592a133" name="afterburn" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.1.3"/>
  <changelog author="sayali.lunkad@suse.com" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="sayali.lunkad@suse.com" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="rjschwei@suse.com" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="rjschwei@suse.com" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="william.brown@suse.com" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
</package>
<package pkgid="448f4f773d64d45a9f96871cc305270f372bc8b35d0d3b4e38348a0a2e2fcf8c" name="afterburn-dracut" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.1.3"/>
  <changelog author="sayali.lunkad@suse.com" date="1616155200">- Set rust version to minimum required by upstream</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 5.0.0
  * Update minimum rust toolchain version 1.44
  * Switch from error-chain to anyhow
  * Remove cl-legacy feature
  * ibmcloud: don't ignore I/O error when parsing metadata
  * providers: fix clippy::unnecessary_wraps lint on 1.50
  * workflows: update pinned lint toolchain to 1.50.0
  * cli: stop wrapping command-line parse errors
  * github: release checklist cleanups
  * providers: add Azure Stack Hub</changelog>
  <changelog author="sayali.lunkad@suse.com" date="1623412800">- Add dracut modules for afterburn</changelog>
  <changelog author="rjschwei@suse.com" date="1626091200">- Add set-default-user.patch
  + Set the default user to suse
- Add fix-authorized-keys-location.patch
  + Write the ssh keys to the standard location
- Add no-network-args.patch
  + Networks arguments on the kernel command line are set during image build
    there is no need for another place for a hard coded list.
- Create target dir for afterburn to write configuration file to</changelog>
  <changelog author="rjschwei@suse.com" date="1626177600">- Forward port fix-authorized-keys-location.patch</changelog>
  <changelog author="slunkad@suse.de" date="1635854400">- Update to version 5.0.0:
  * cargo: Afterburn release 5.0.0
  * providers: add Azure Stack Hub (azurestack)
  * providers: move azure into microsoft module
  * build(deps): bump anyhow from 1.0.39 to 1.0.40
  * ci: adapt to new buildroot image
  * build(deps): bump serde from 1.0.124 to 1.0.125
  * build(deps): bump anyhow from 1.0.38 to 1.0.39
  * cargo: accept mockito 0.29
  * build(deps): bump mockito from 0.29.0 to 0.30.0
  * cli: stop wrapping command-line parse errors
  * Switch from error-chain to anyhow</changelog>
  <changelog author="william.brown@suse.com" date="1635854401">- Add cargo_audit service
- Resolve incomplete use of services for getting source tars.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637064000">- No reason to exclude armv7, since it builds properly</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642075200">- Update some dependencies
  * build(deps): bump nix from 0.17.0 and 0.20.0 to 0.23.1
    This fixes the following security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0119
  * build(deps): bump generic-array from 0.12.3 to 0.12.4
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0146 AKA CVE-2020-36465
  * build(deps): bump futures-util from 0.3.6 to 0.3.15
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2020-0059 AKA CVE-2020-35905
  * build(deps): bump rand_core from 0.6.1 to 0.6.3
    This fixes a security issue:
    https://rustsec.org/advisories/RUSTSEC-2021-0023
    AKA CVE-2021-27378, bsc#1182432
  * build(deps): bump hyper from 0.14.2 to 0.14.11
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0078
    AKA CVE-2021-32715, bsc#1188173
    https://rustsec.org/advisories/RUSTSEC-2021-0079
    AKA CVE-2021-32714, bsc#1188174
  * build(deps): bump tokio from 1.0.1 to 1.15.0
    This fixes two security issues:
    https://rustsec.org/advisories/RUSTSEC-2021-0124
    AKA CVE-2021-45710, bsc#1194119
    https://rustsec.org/advisories/RUSTSEC-2021-0072 AKA CVE-2021-38191
- Remove cargo_audit service, as it makes no sense as a service (it doesn't
  automatically get rerun), it would make more sense during the build process
  as then it gets rerun if the package or the vulnerability database get
  changed
- switch services from disabled to manual
- remove hard coded author for tar_scm service</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1642507200">- Update to version 5.2.0:
  * providers: log message when SSH key is removed
  * providers: limit hostname file output value to HOST_NAME_MAX bytes
  * Consistently un-capitalize log messages
  * Explicitly log the hostname we write
  * providers/microsoft: allow unused fields in goal state structs
  * providers: only log we wrote SSH keys when we actually did
- Update to version 5.1.0:
  * Add PowerVS provider
  * cli: correctly print version when --version specified
  * cli: don't report an error when --help or --version is specified
  * providers/packet: access metadata service over HTTPS
  * providers/gcp: access GCP metadata service by IP address
  * minimum supported rust version is now 1.49.0
  * Refresh fix-authorized-keys-location.patch</changelog>
</package>
<package pkgid="e11925980d88b782d432a4fbf67f6aeb2d9abe580970b1da31f056c1a3e78252" name="aide" arch="x86_64">
  <version epoch="0" ver="0.16" rel="24.1"/>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="abergmann@suse.com" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
  <changelog author="meissner@suse.com" date="1610020800">- aide-0.15-syslog-format.patch: Add a syslog_format to aide (bsc#1180165)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1637755200">- aide-disable-gcrypt-MD5-in-fips-mode.patch: gcrypt aborts if MD5
  is used in fips mode, so disable it also in aide (bsc#1191422).</changelog>
  <changelog author="meissner@suse.com" date="1642420800">- aide-0.16-cve-2021-45417.patch: Fix a bufferoverflow in base64
  functions (bsc#1194735 CVE-2021-45417)</changelog>
</package>
<package pkgid="b6a59a994e9dee2d499d7c6e6586b40c2d8d5265c188a53631ffa5747ee653bf" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.53.0" rel="4.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="15c24d9b5f8f5c2c554b648ecdee78393d267c14bc327e8096cdb0bfc42aa1a7" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="08588839386e56795bf2a628992b4dbc43102821ede1e4b9e061afbfe8e00d22" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="150300.3.11.2"/>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602158400">- %service_del_postun_without_restart only works for Tumbleweed,
  keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602676800">- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
  cap_checkpoint_restore.diff)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602936000">- update to AppArmor 2.13.5
  - add missing permissions to several profiles and abstractions
  - bugfixes in parser and tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
    for the detailed upstream changelog
- remove upstream(ed) patches
  - changes-since-2.13.4.diff
  - abstractions-X-xauth-mr582.diff
  - sevdb-caps-mr589.diff
  - libvirt-leaseshelper.patch
  - cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1607515200">- update to AppArmor 2.13.6
  - fix utils hotkey conflicts in some languages
  - aa-autodep: load abstractions on start (boo#1178527)
  - add usr.lib.dovecot.script-login profile
  - minor additions in abstractions/X and the dovecot profile
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.6
    for the detailed upstream changelog
- drop upstreamed patch libapparmor-so-number.diff</changelog>
  <changelog author="mcepl@suse.com" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="mcepl@suse.com" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
  <changelog author="meissner@suse.com" date="1638273600">- fixed requires of python3 module (bsc#1191690).</changelog>
  <changelog author="nopower@suse.com" date="1641384000">- add add-samba-bgqd.diff: add profile for samba-bgqd;
  (bsc#1191532).</changelog>
  <changelog author="nopower@suse.com" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb;
  (bsc#1192684).</changelog>
</package>
<package pkgid="136a4984472c1363bdc56ae886a25d10ec8497844e04c8f3cb9b15bab3494e22" name="at-spi2-core" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="2.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 2.31.2:
  + Add ScrollSubstringTo and ScrollSubstringToPoint text
    interfaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787201">- Update to version 2.31.92:
  + Fix atspi_table_cell_get_(row_column)_headers.
  + Update documentation to indicate that extents are only
    meaningful when an object has both STATE_VISIBLE and
    STATE_SHOWING.
  + Use a consistent style for the meson options.
  + Fix a compiler warning on BSD.
  + Add ScrollSubstringTo and ScrollSubstringToPoint text
    interfaces.
- Enable gtk-docs BuildRequires and update options passed to meson.
- Drop unneeded and unused intltool BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552392000">- Update to version 2.32.0:
  + Stable release version bump.</changelog>
  <changelog author="mgorse@suse.com" date="1552392001">- Add at-spi2-core-meson-build-fix.patch: fix build for meson
  0.50.0 (glgo#GNOME/at-spi2-core!9).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 2.32.1:
  + Fix meson build for meson 0.50.0 and newer.
- Drop at-spi2-core-meson-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561464000">- Update to version 2.33.2:
  + Check WAYLAND_DISPLAY, rather than XDG_SESSION_TYPE, to avoid X
    connections. Fixes breakage if X is started with startx and
    XDG_SESSION_TYPE is unset.
  + X11: also try mod4 and mod5 to generate keysyms.
  + Add ATSPI_ROLE_CONTENT_DELETION and
    ATSPI_ROLE_CONTENT_INSERTION.
  + Check for dbus-daemon in /usr/lib (for Solaris).</changelog>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 2.33.90:
  + Refactor the API for the screen reader to notify listeners
    of its status.
  + Add a sender to the AtspiEvent struct.
  + Add missing atspi_application_get_type prototype.
  + Support mutter remote desktop interface for synthesizing
    keyboard/mouse events (likely still needs work).</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 2.33.92:
  + Now requires meson 0.50.0.
  + License is now LGPL-2.1+.
  + Meson: only link to libdl when it is necessary.
  + Update installation instructions.
  + Clarify atspi_editable_text_insert_text documentation.
  + Do not warn on no reply from pending get_items call.
  + Eliminate some superfluous runtime warnings.
- Require meson &gt;= 0.50.0.
- Set license to LGPL-2.1-or-later.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 2.34.0:
  + Fix a use after free when freeing an event.
  + Clean up handling of the X11 property specifying the bus
    address.
  + Update doap.</changelog>
  <changelog author="mgorse@suse.com" date="1582804800">- Ad at-spi2-core-async-session-register.patch: make bus-launcher
  session registration more robust (boo#1154582).</changelog>
</package>
<package pkgid="85fd89b47967cbc2ea85d9b237e1d2d6cce27a91d4e159750cf0ff13396f47ab" name="attr" arch="x86_64">
  <version epoch="0" ver="2.4.47" rel="2.19"/>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Add config-guess-sub-update.patch:
  Update confg.guess/sub for aarch64</changelog>
  <changelog author="schwab@suse.de" date="1359806401">- Add attr-syscalls.patch:
  Define attr syscall numbers for aarch64</changelog>
  <changelog author="schwab@suse.de" date="1360065600">- Remove unused autoconf and automake build requires</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Update to new upstream release 2.4.47
  * This release fixes two functional bugs related to tree walking
  and the return code from getfattr. Also, a number of build system
  problems were fixed.
- Remove config-guess-sub-update.patch (no longer applies),
  attr-syscalls.patch (resolved differently upstream),
  builddefs.in.diff (replaced by logic in specfile)
- Signature verification</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline from bootstrap packages</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="daf004da99ea4d7929e0d0e82e5aaea180fe3415a29975b28768acc44b82860b" name="audit" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="3.2"/>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)
- Resolve issue with previous change if both Python2 and Python3 are
  present, tests were failing as python2 bindings are preferred in this
  case.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.6.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
</package>
<package pkgid="4674610e4ec1d8cf57fc198451056b371b8896b3b7f79b90235a9eeab7196ab2" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="3.2"/>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)
- Resolve issue with previous change if both Python2 and Python3 are
  present, tests were failing as python2 bindings are preferred in this
  case.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.6.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
</package>
<package pkgid="2a86581150ac2a20c7dd924d35a9d3f81a6cc4ae63e8169a5ec8622e66d98342" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jsikes@suse.com" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- support new chrony 4.1 options (jsc#SLE-17334)
  augeas-new_options_for_chrony.patch</changelog>
</package>
<package pkgid="36036635a0535909df883614b03cc52ff7dee9cc5ab0639c493128a83526ad66" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jsikes@suse.com" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- support new chrony 4.1 options (jsc#SLE-17334)
  augeas-new_options_for_chrony.patch</changelog>
</package>
<package pkgid="e1b2be8ed0f04a64397c18d38c6dfb3bb0c2f7df6832e365bf3140a336e90d43" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.7" rel="3.18.1"/>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="mgorse@suse.com" date="1642161600">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1644235200">- Have python3-avahi require python3-dbus-python, not the
  python 2 dbus-1-python package (bsc#1195614).</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="mgorse@suse.com" date="1645704000">- Downgrade python3-Twisted to a Recommends. It is not available
  on SLED or PackageHub, and it is only needed by avahi-bookmarks
  (bsc#1196282).
- Add avahi-bookmarks-import-warning.patch: fix warning when
  twisted is not available.</changelog>
</package>
<package pkgid="fd402df3f69da269a086bd511b8979066998bdcdc201fa08d0a6d1f0eecd6c97" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.6.1"/>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
</package>
<package pkgid="d2e45b70bd4b2f44b69bf0217f3501a76f79aa3931c4c29bd42535a550cbd3f5" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.7" rel="4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
</package>
<package pkgid="f8dbaacdb8f1adf6103b63756a3036b8e2a3af782223e0ae6577f5bffe221030" name="bc" arch="x86_64">
  <version epoch="0" ver="1.07.1" rel="11.37"/>
  <changelog author="schwab@suse.de" date="1198756800">- Fix last change.
- Fix detection of empty opt_expression in the parser.</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- update to upstream alpha 1.06.95 (2006-09-05), in use in other
  major distros for quite a long time (Debian, Fedora, Ubuntu, ...)
- add patches from Fedora
- automake dependency removed</changelog>
  <changelog author="idonmez@suse.com" date="1347883200">- Add BuildRequires on makeinfo to fix Factory build</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Clean up with spec-cleaner
- Add ncurses-devel as it is inherited from readline
- Explicitely pass without-libedit if we decide to switch for
  it at some point</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Update url
- Correct info files scriplets and dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1491825600">- Update to version 1.07.1:
  * Fixed ibase extension causing problems for read()
  * Fixed parallel make problem.
  * Fixed dc "Q" comanmd bug.
- Changes for version 1.07:
  * Added void functions.
  * fixes bug in load_code introduced by mathlib string storage in 1.06.
  * fix to get long options working.
  * signal code clean-up.
  * fixed a bug in the AVL tree routines.
  * fixed math library to work properly when called with ibase not 10.
  * fixed a symbol table bug when using more than 32 names.
  * removed a double free.
  * Added base 17 to 36 for ibase.
  * Fixed some memory leaks.
  * Various small tweaks and doc bug fixes.
- Drop no longer needed patches:
  * bc-1.06.95-memleak.patch
  * bc-1.06.95-matlib.patch
  * bc-1.06.95-sigintmasking.patch
- Refresh bc-1.06-dc_ibase.patch
- Add gpg signature</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- added patches
  Correct return value after 'q' [bsc#1129038]
  + bc-dc-correct-return-value.patch</changelog>
  <changelog author="kukuk@suse.de" date="1566993600">- Use %license instead of %doc [bsc#1082318]
- Cleanup %doc section</changelog>
  <changelog author="pgajdos@suse.com" date="1602763200">- fix [bsc#1177579] -- wrong clamping of hexadecimal digits in dc
- deleted patches
  - bc-1.06-dc_ibase.patch (upstreamed)</changelog>
</package>
<package pkgid="fef69d66d3277d010edb50b911102d85a16cfa0266b9083fe363da9debd1411e" name="bcache-tools" arch="x86_64">
  <version epoch="0" ver="1.1" rel="3.12.2"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="jengelh@inai.de" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="jengelh@inai.de" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="colyli@suse.com" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="colyli@suse.com" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="colyli@suse.com" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="6a57205df934c9731d34bde5961f73f76f0be7f2c6224f3d2255a9a4f801fb85" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="5.3.1"/>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="aab2e19cb5e0981e5f5425056bd3f74ae23c0f82940040ec55aaadb07932e3ca" name="blog" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150300.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
</package>
<package pkgid="d42d739dd6b7a555f7312bb2244b22f4e08940155cd165122ce589c5c14d15d0" name="bluez-firmware" arch="x86_64">
  <version epoch="0" ver="1.2" rel="1.23"/>
  <changelog author="kkeil@suse.de" date="1096545600">- remove obsolete dependency on kernel-source</changelog>
  <changelog author="dmueller@suse.de" date="1128513600">- add norootforbuild</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="agruen@suse.de" date="1141819200">- Add modalias tags (155357).</changelog>
  <changelog author="seife@suse.de" date="1152187200">- update to v1.2:
  * ver 1.2:
    Add ST Microelectronics firmware files.
  * ver 1.1:
    Add old Broadcom firmware files.</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="coolo@suse.com" date="1362225600">- update license to new format</changelog>
  <changelog author="mpluskal@suse.com" date="1428148800">- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="8d336f3ce0141585f6636726e34d7a190a90d47bc79f24f0b71fb087c878cc47" name="boost-license1_66_0" arch="noarch">
  <version epoch="0" ver="1.66.0" rel="12.3.1"/>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
</package>
<package pkgid="5784788a9c576407de0e2702073e9d2426c268794ac1f4669483837170f807b5" name="btrfsmaintenance" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="3.3.1"/>
  <changelog author="kukuk@suse.de" date="1513512000">- Switch default of btrfsmaintenance-refresh.service to systemd-timer,
  too (btrfsmaintenance-switch-to-timer.patch) [bsc#1073204]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1513944000">- Fix systemd timers enabled even if period is set to none:
  * Micro change in pull-request-36.patch (bsc#1075884)
- Clean spec file:
  * Removed support for suse_version &lt;= 1210.
  * Removed call to btrfsmaintenance-refresh-cron.sh upon deletion
    (not needed anymore since we use systemd timers which are
    handled by macros).
  * Ran spec-cleaner.</changelog>
  <changelog author="dsterba@suse.cz" date="1515931200">- update to version 0.4
  - add support for systemd timers and use them by default; the alternative
    cron scripts are still present (#29, #36)
  - add automatic monitoring (via systemd.path) of the config file,
    no manual updates by btrfsmaintenance-refresh.service needed (#38)
  - fix RPM database path detection
  - spec file cleanups
  - documentation updates
- removed patches:
  - btrfsmaintenance-0.3.1-fix-rpm-db-path.patch (upstream)
  - btrfsmaintenance-switch-to-timer.patch (upstream)
  - pull-request-36.patch (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1517832000">- Move the defrag plugin over to Python 3. (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Add missing btrfsmaintenance-refresh.path [bsc#1084871]
- Use %license [bsc#1082318]</changelog>
  <changelog author="dsterba@suse.cz" date="1521028800">- update to version 0.4.1
  - defrag plugin: python2 and 3 compatibility
  - defrag plugin: target extent size lowered to 32MiB (#43)
  - shell compatibility fixes
  - systemd unit type fixes
- Removed patch: python3-support-bsc1070322.diff (upstream)</changelog>
  <changelog author="lpechacek@suse.com" date="1523620800">- In openSUSE the defrag plugin must explicitly refer to Python 3.
  (bsc#1070322)
- Added patch: python3-support-bsc1070322.diff</changelog>
  <changelog author="dsterba@suse.cz" date="1537790400">- update to version 0.4.2
  - CVE-2018-14722: expand auto mountpoints in a safe way
  - btrfs-defrag: fix missing function to detect btrfs filesystems (#52)
  - btrfs-trim: more verbose fstrim output (#60)
  - dist-install: print information about timer unit installation (#58)</changelog>
  <changelog author="jeffm@suse.com" date="1552392000">- Document and adjust balance thresholds and periods (FATE#325529 jsc#SLE-3188).
  * README: document impact of balance + quota groups
  * sysconfig: reduce default balance usage thresholds
  * sysconfig: document using systemd.time(7) for frequency of operations
  * btrfsmaintenance-refresh-cron.sh: validate periods for cron-based systems
- Remove python dependency (FATE#326736 jsc#SLE-4130).
  * btrfs-defrag-plugin: remove dependency on zypp-plugin-python
- Added patches:
  * 0001-README-document-impact-of-balance-quota-groups.patch
  * 0002-sysconfig-reduce-default-balance-usage-thresholds-fa.patch
  * 0003-sysconfig-document-using-systemd.time-7-for-frequenc.patch
  * 0004-btrfsmaintenance-refresh-cron.sh-validate-periods-fo.patch
  * 0005-btrfs-defrag-plugin-remove-dependency-on-zypp-plugin.patch
- Added source:
  * btrfs-defrag-plugin.sh
- Removed patch:
  * python3-support-bsc1070322.diff</changelog>
  <changelog author="rgoldwyn@suse.com" date="1605873600">- btrfsmaintenance.service-delete-install-section.patch: Remove [Install]
  section (bsc#1178874)</changelog>
</package>
<package pkgid="a6466059c27ed407853234390df6d365b2ff6bc79210b6bfe7349c1f64ea04d7" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="4.19.1" rel="16.1"/>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="mfasheh@suse.com" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="rgoldwyn@suse.com" date="1607601600">- Enqueue feature to wait for exclusive operation to finish
  (JSC#SLE-15234)
- Added patches:
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1609848000">- Refresh manual pages after the docs change (jsc#SLE-13586)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1617969600">- Correct check_running_fs_exclop() return value (bsc#1184481)
  btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
</package>
<package pkgid="5507389876af018d1d0fcf1385b955e599986ba56e3a23d1cf5514f44cb73ac9" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="16.1"/>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="mfasheh@suse.com" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="rgoldwyn@suse.com" date="1607601600">- Enqueue feature to wait for exclusive operation to finish
  (JSC#SLE-15234)
- Added patches:
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1609848000">- Refresh manual pages after the docs change (jsc#SLE-13586)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1617969600">- Correct check_running_fs_exclop() return value (bsc#1184481)
  btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
</package>
<package pkgid="d5e018b666cc72b60204ed237bebd1a498d182a53a88314deeccd447b58de031" name="bzip2" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="5.11.1"/>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="kstreitova@suse.com" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="kstreitova@suse.com" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="6420f727cb2ba445d56c61db35d61cfe99bb0219862eaffe28ae9cfb65050916" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20210309.21162a6" rel="2.1"/>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- backport bash rewrite from Factory to make sure to trigger in
  transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl is no longer required but coreutils and findutils are
  (boo#1183680). Keep openssl(cli) at runtime for now nevertheless as this
  package might be the only one pulling it in.</changelog>
</package>
<package pkgid="6208279d78365a1bcbcf7f91df2307ce221b85d0c2b2248791b5c7b862609eb9" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.44" rel="21.1"/>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
</package>
<package pkgid="594707d18b00a3c2c4541d9eb6d26d3b4f2b51fcb9e11a4a2b25a4031cbbe31e" name="ca-certificates-mozilla-prebuilt" arch="noarch">
  <version epoch="0" ver="2.44" rel="21.1"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
</package>
<package pkgid="15367ba27f251654d4d02b0bfa45a10ef1fec372d907d23fce3b6e9778b0270a" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="3.3.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="0cb93ca367f99b46b2e427f8f01dfda4256d0c790b76bb0283f9a7ba02d6f992" name="checkpolicy" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.4.2"/>
  <changelog author="jsegitz@suse.com" date="1511524800">- Update to version 2.6. Notable changes:
  * Add types associated to a role in the current scope when parsing
  * Extend checkpolicy pathname matching
  * Set flex as default lexer
  * Fix checkmodule output message
  * Fail if module name different than output base filename
  * Add support for portcon dccp protocol</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 2.7.
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1528718400">- checkpolicy-build.patch was added in the former change to fix build
  failures</changelog>
  <changelog author="jsegitz@suse.com" date="1539777600">- Update to version 2.8 (bsc#1111732).
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- Dropped checkpolicy-build.patch, not necessary anymore
- Removed BuildRequires for byacc. It builds without and this blocks
  building on SLE 15</changelog>
  <changelog author="jsegitz@suse.com" date="1541592000">- Source URL was invalid (bsc#1115052)</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Enable parallel build. Remove ineffective LDFLAGS="$RPM_LD_FLAGS"
  (RPM_LD_FLAGS is always empty).</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add option to sort contexts when creating a binary policy
  * Update manpage
  * check the result value of hashtable_search
  * destroy the class datum if it fails to initialize
  * remove extraneous policy build noise</changelog>
  <changelog author="jsegitz@suse.de" date="1579089600">- Add extern_te_assert_t.patch to mark te_assert_t as extern.
  Prevents build failures on gcc10 (bsc#1160259)</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * add flag to enable policy optimization
  * allow to write policy to stdout
  * remove a redundant if-condition</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * checkpolicy treats invalid characters as an error - might break rare use
    cases (intentionally)
  * Drop extern_te_assert_t.patch, is upstream</changelog>
</package>
<package pkgid="a42c05781928d7593298351ed2c8d9f0ad7d363ff36602d12670305889fa9992" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.16.3.1"/>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
</package>
<package pkgid="42e0d03741b1bf2ebaa0c9d7acccaf3937aca400f2e4e70ee6bfcb725e52c17f" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.1" rel="150300.16.3.1"/>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
</package>
<package pkgid="d3fef7b71ee9d32149ce81cc6704dd8dab373dedcd9b46afce452431777d2ecd" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.9" rel="5.12.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="410ecde927545b93676fd2a00a2e773bd46e5213312b3dfcf324dbfd626df6bb" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="3.5.3"/>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
</package>
<package pkgid="581d35d1718b50034af5a9c5cefb6feaa032b7956bcb094955d54dfa5aaad929" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="3.8.1"/>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
</package>
<package pkgid="55cf670a769835a181f8bbf69c14c9b347acb0d452987f89fff45dd263496ee3" name="cockpit" arch="x86_64">
  <version epoch="0" ver="251.3" rel="150300.4.1"/>
  <changelog author="lnussel@suse.de" date="1621339200">- new version 244.1
  https://cockpit-project.org/blog/cockpit-244.html
- enable SELinux</changelog>
  <changelog author="adam.majer@suse.de" date="1622116800">- new version 245
  https://cockpit-project.org/blog/cockpit-245.html</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- new version 250
  https://cockpit-project.org/blog/cockpit-250.html
- fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1629374400">- add --legacy-peer-deps to fix build</changelog>
  <changelog author="adam.majer@suse.de" date="1643371200">- new version 251.3
  * https://cockpit-project.org/blog/cockpit-251.html
  with additional fixes
  * Fix "Administrative Access" prompt for "Duo" MFA</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630400">- update to new LTS version from openSUSE:Factory
- port remove-pwscore.patch
  * remove dependency on pwscore (bsc#1182924)
  * remove password strenth indicator
- port branding changes as suse-microos "theme"
  * remove suse_cockpit_assets.tar.gz
  * add suse-microos-branding.tar.gz
  * remove branding_tests.patch
  * add suse-microos-branding.patch
- remove files not needed to build this version anymore
  * webpack-warnings-are-not-errors.patch
  * github_package.patch
  * nodejs_output_helper.bash
- remove cockpit.permissions workaround (bsc#1169614)</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630401">- change self-signed cert group from cockpit-wsintance to
  cockpit-ws on upgrade</changelog>
  <changelog author="jtomasiak@suse.com" date="1646049600">- add hide-pcp.patch to hide references to PCP (Performance
  Co-Pilot) and metric collection (bsc#1195943). The cockpit-pcp
  package is not included in SLE Micro 5.2 base and these parts
  require it.</changelog>
  <changelog author="jtomasiak@suse.com" date="1647345600">- make package compatible with OBS version (bsc#1197224):
  * move branding images to distribution-logos-SLE package
  * re-add dependency on distribution-logos
  * remove branding patch and assets (suse-microos-branding.patch,
    suse-microos-branding.tar.gz); moved to GitHub fork
  * remove local __python3 macro
  * apply SLE specific patches only on SLE</changelog>
  <changelog author="jtomasiak@suse.com" date="1647604800">- re-add suse-microos-branding.patch from GitHub
- add hide-docs.patch (bsc#1197003)</changelog>
</package>
<package pkgid="a7d50be0e164aeb8f1d6fd11ad1c9248303dab912d2f90e787545f61efe7baaa" name="cockpit-branding-openSUSE-Leap-Micro" arch="noarch">
  <version epoch="0" ver="5.1" rel="1.1"/>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- initial package</changelog>
</package>
<package pkgid="12f0bf2174b9e4beb220e4e50ebd8f7f99c7fc2a0082839f15b960709703ed05" name="cockpit-bridge" arch="x86_64">
  <version epoch="0" ver="251.3" rel="150300.4.1"/>
  <changelog author="lnussel@suse.de" date="1621339200">- new version 244.1
  https://cockpit-project.org/blog/cockpit-244.html
- enable SELinux</changelog>
  <changelog author="adam.majer@suse.de" date="1622116800">- new version 245
  https://cockpit-project.org/blog/cockpit-245.html</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- new version 250
  https://cockpit-project.org/blog/cockpit-250.html
- fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1629374400">- add --legacy-peer-deps to fix build</changelog>
  <changelog author="adam.majer@suse.de" date="1643371200">- new version 251.3
  * https://cockpit-project.org/blog/cockpit-251.html
  with additional fixes
  * Fix "Administrative Access" prompt for "Duo" MFA</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630400">- update to new LTS version from openSUSE:Factory
- port remove-pwscore.patch
  * remove dependency on pwscore (bsc#1182924)
  * remove password strenth indicator
- port branding changes as suse-microos "theme"
  * remove suse_cockpit_assets.tar.gz
  * add suse-microos-branding.tar.gz
  * remove branding_tests.patch
  * add suse-microos-branding.patch
- remove files not needed to build this version anymore
  * webpack-warnings-are-not-errors.patch
  * github_package.patch
  * nodejs_output_helper.bash
- remove cockpit.permissions workaround (bsc#1169614)</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630401">- change self-signed cert group from cockpit-wsintance to
  cockpit-ws on upgrade</changelog>
  <changelog author="jtomasiak@suse.com" date="1646049600">- add hide-pcp.patch to hide references to PCP (Performance
  Co-Pilot) and metric collection (bsc#1195943). The cockpit-pcp
  package is not included in SLE Micro 5.2 base and these parts
  require it.</changelog>
  <changelog author="jtomasiak@suse.com" date="1647345600">- make package compatible with OBS version (bsc#1197224):
  * move branding images to distribution-logos-SLE package
  * re-add dependency on distribution-logos
  * remove branding patch and assets (suse-microos-branding.patch,
    suse-microos-branding.tar.gz); moved to GitHub fork
  * remove local __python3 macro
  * apply SLE specific patches only on SLE</changelog>
  <changelog author="jtomasiak@suse.com" date="1647604800">- re-add suse-microos-branding.patch from GitHub
- add hide-docs.patch (bsc#1197003)</changelog>
</package>
<package pkgid="a30c54b8c19cf7f8259707c5b145dca475dfc30f92cf1439d2ae014edffd4505" name="cockpit-machines" arch="noarch">
  <version epoch="0" ver="249.1" rel="150300.3.1"/>
  <changelog author="lnussel@suse.de" date="1620043200">- initial package</changelog>
  <changelog author="ecsos@opensuse.org" date="1624795200">- Add source-offest to _service to fix build error in Leap 15.3.</changelog>
  <changelog author="lnussel@suse.de" date="1628856000">- new version 249.1
  https://github.com/cockpit-project/cockpit-machines/releases/tag/249</changelog>
  <changelog author="jtomasiak@suse.com" date="1643371200">- Re-add source-offset to _service.</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630400">- Remove translate-toolkit which is not available in SLE</changelog>
  <changelog author="jtomasiak@suse.com" date="1646913600">- Require virt-install and qemu display drivers needed to start
  new VMs (bsc#1196971)</changelog>
  <changelog author="jtomasiak@suse.com" date="1647259200">- Hide links pointing to RHEL docs, hide-docs.patch (bsc#1197003)</changelog>
</package>
<package pkgid="465f9d22357e17e75f4964b249ca692e2f12504308a671425b9408ba065dfc5a" name="cockpit-podman" arch="noarch">
  <version epoch="0" ver="27.1" rel="4.1"/>
  <changelog author="lnussel@suse.de" date="1597406400">- initial package version 21</changelog>
  <changelog author="lnussel@suse.de" date="1601640000">- new version 24
  https://cockpit-project.org/blog/cockpit-228.html</changelog>
  <changelog author="lnussel@suse.de" date="1602763200">- new version 25
  https://cockpit-project.org/blog/cockpit-230.html</changelog>
  <changelog author="lnussel@suse.de" date="1611316800">- new version 26
  https://github.com/cockpit-project/cockpit-podman/releases/tag/26</changelog>
  <changelog author="adam.majer@suse.de" date="1611748800">- new version 27.1
  https://github.com/cockpit-project/cockpit-podman/releases
- migrate to local rebuild</changelog>
</package>
<package pkgid="1071746a83db95e821622dcf9eda6f1ae360eb6c034f10eb3221b38870f84019" name="cockpit-system" arch="noarch">
  <version epoch="0" ver="251.3" rel="150300.4.1"/>
  <changelog author="lnussel@suse.de" date="1621339200">- new version 244.1
  https://cockpit-project.org/blog/cockpit-244.html
- enable SELinux</changelog>
  <changelog author="adam.majer@suse.de" date="1622116800">- new version 245
  https://cockpit-project.org/blog/cockpit-245.html</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- new version 250
  https://cockpit-project.org/blog/cockpit-250.html
- fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1629374400">- add --legacy-peer-deps to fix build</changelog>
  <changelog author="adam.majer@suse.de" date="1643371200">- new version 251.3
  * https://cockpit-project.org/blog/cockpit-251.html
  with additional fixes
  * Fix "Administrative Access" prompt for "Duo" MFA</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630400">- update to new LTS version from openSUSE:Factory
- port remove-pwscore.patch
  * remove dependency on pwscore (bsc#1182924)
  * remove password strenth indicator
- port branding changes as suse-microos "theme"
  * remove suse_cockpit_assets.tar.gz
  * add suse-microos-branding.tar.gz
  * remove branding_tests.patch
  * add suse-microos-branding.patch
- remove files not needed to build this version anymore
  * webpack-warnings-are-not-errors.patch
  * github_package.patch
  * nodejs_output_helper.bash
- remove cockpit.permissions workaround (bsc#1169614)</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630401">- change self-signed cert group from cockpit-wsintance to
  cockpit-ws on upgrade</changelog>
  <changelog author="jtomasiak@suse.com" date="1646049600">- add hide-pcp.patch to hide references to PCP (Performance
  Co-Pilot) and metric collection (bsc#1195943). The cockpit-pcp
  package is not included in SLE Micro 5.2 base and these parts
  require it.</changelog>
  <changelog author="jtomasiak@suse.com" date="1647345600">- make package compatible with OBS version (bsc#1197224):
  * move branding images to distribution-logos-SLE package
  * re-add dependency on distribution-logos
  * remove branding patch and assets (suse-microos-branding.patch,
    suse-microos-branding.tar.gz); moved to GitHub fork
  * remove local __python3 macro
  * apply SLE specific patches only on SLE</changelog>
  <changelog author="jtomasiak@suse.com" date="1647604800">- re-add suse-microos-branding.patch from GitHub
- add hide-docs.patch (bsc#1197003)</changelog>
</package>
<package pkgid="25862c7f981defa17887fdd1b6a0071786936abf04eccc2ac312aee673021326" name="cockpit-wicked" arch="noarch">
  <version epoch="0" ver="4.2" rel="4.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1606219200">- Version 1.
- First public release.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1606996800">- Version 2:
  * Fix routes handling (gh#94).
  * Display those interfaces that are not managed by Wicked in a
    separate list (gh#95). As part of this enhancement, several
    visual improvements were introduced.
  * Just write the changes to the ifcfg-* files (gh#98).
  * Avoid calling too many external tools to get the list of
    ESSIDs (gh#91).
  * Adjust the label of the button that allows deleting an
    interface configuration (gh#102).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1610366400">- Version 3:
  * Properly remove the last route in /etc/sysconfig/network/routes
    (gh#110).
  * Improve detection of virtual interfaces (gh#113).
  * Usability improvements in the interfaces (gh#114, gh#115)
    and routes lists (gh#112).
  * Update dependencies to latest compatible versions (gh#116).
  * Added translations for Catalan, Japanese, Portuguese
    (Brazil and Portugal) and Spanish.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1614945600">- Version 4:
  * Properly detect whether the interface is up (gh#123 and
    bsc#1182189).
  * Clarify that the "Routing" tab is about user-defined routes (related
    to gh#122).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1627300800">- Version 4.1:
  * Fix a problem when detecting whether an interface is down and
    clean up the list of assigned addresses when they are released
    (gh#128, bsc#1182189 and bsc#1186736).
  * Update several dependencies to address security concerns
    (gh#127).
  * Add translations for German, Hindi and Sinhala (work in
    progress).
  * Update translations for Catalan, Czech, Italian, Japanese
    and Portuguese (Brazil).</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1629374400">- Version 4.2:
  * Update a few dependencies to address security concerns
    (gh#132).
- Fix a packaging problem that caused cockpit-wicked to do not
  work at all (bsc#1189611).</changelog>
</package>
<package pkgid="6e63c207e56f8a24f23b6a8bc4a1b5bca06eaca244f9a81b5c838e46b5784fda" name="cockpit-ws" arch="x86_64">
  <version epoch="0" ver="251.3" rel="150300.4.1"/>
  <changelog author="lnussel@suse.de" date="1621339200">- new version 244.1
  https://cockpit-project.org/blog/cockpit-244.html
- enable SELinux</changelog>
  <changelog author="adam.majer@suse.de" date="1622116800">- new version 245
  https://cockpit-project.org/blog/cockpit-245.html</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- new version 250
  https://cockpit-project.org/blog/cockpit-250.html
- fix pam_motd selinux denial (0001-selinux-allow-login-to-read-motd-file.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1629374400">- add --legacy-peer-deps to fix build</changelog>
  <changelog author="adam.majer@suse.de" date="1643371200">- new version 251.3
  * https://cockpit-project.org/blog/cockpit-251.html
  with additional fixes
  * Fix "Administrative Access" prompt for "Duo" MFA</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630400">- update to new LTS version from openSUSE:Factory
- port remove-pwscore.patch
  * remove dependency on pwscore (bsc#1182924)
  * remove password strenth indicator
- port branding changes as suse-microos "theme"
  * remove suse_cockpit_assets.tar.gz
  * add suse-microos-branding.tar.gz
  * remove branding_tests.patch
  * add suse-microos-branding.patch
- remove files not needed to build this version anymore
  * webpack-warnings-are-not-errors.patch
  * github_package.patch
  * nodejs_output_helper.bash
- remove cockpit.permissions workaround (bsc#1169614)</changelog>
  <changelog author="jtomasiak@suse.com" date="1643630401">- change self-signed cert group from cockpit-wsintance to
  cockpit-ws on upgrade</changelog>
  <changelog author="jtomasiak@suse.com" date="1646049600">- add hide-pcp.patch to hide references to PCP (Performance
  Co-Pilot) and metric collection (bsc#1195943). The cockpit-pcp
  package is not included in SLE Micro 5.2 base and these parts
  require it.</changelog>
  <changelog author="jtomasiak@suse.com" date="1647345600">- make package compatible with OBS version (bsc#1197224):
  * move branding images to distribution-logos-SLE package
  * re-add dependency on distribution-logos
  * remove branding patch and assets (suse-microos-branding.patch,
    suse-microos-branding.tar.gz); moved to GitHub fork
  * remove local __python3 macro
  * apply SLE specific patches only on SLE</changelog>
  <changelog author="jtomasiak@suse.com" date="1647604800">- re-add suse-microos-branding.patch from GitHub
- add hide-docs.patch (bsc#1197003)</changelog>
</package>
<package pkgid="026a4ab11d2e80d4f7517aa94a876354cdf599874e8fc49e78afef5d7e2dbe56" name="combustion" arch="noarch">
  <version epoch="0" ver="0.2" rel="5.1"/>
  <changelog author="fvogt@suse.com" date="1593604800">- Set the timeout for the config device explicitly, like ignition-dracut</changelog>
  <changelog author="fvogt@suse.com" date="1594296000">- Also force mounting of /tmp
- Fix getting the script's return value</changelog>
  <changelog author="fvogt@suse.com" date="1594987200">- Adjust README after removal of combustion-generator
- Switch to GPL-2.0-only</changelog>
  <changelog author="fvogt@suse.com" date="1599220800">- Add combustion-prepare.service to enable network if needed:
  M combustion
  A combustion-prepare.service
  M combustion.service
  M module-setup.sh
- Don't fail if no config drive found to not break ignition with
  fw_cfg</changelog>
  <changelog author="iforster@suse.com" date="1600084800">- Avoid concurrent run of Ignition and Combustion initialization
  scripts to a avoid a duplicate mount of the same device.</changelog>
  <changelog author="fvogt@suse.com" date="1600344000">- Overhaul configuration fetching:
  * Add udev rules to wait for either ignition, combustion or
    fw_cfg drives
  * Allow combustion.firstboot in addition to ignition.firstboot
  M combustion
  A combustion-prepare.service
  M combustion.service
  M module-setup.sh
- Bump version to 0.2</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Fail properly when the retval file doesn't exist
- Stop ignition-mount.service to avoid conflict (boo#1176746)</changelog>
  <changelog author="fvogt@suse.com" date="1601985600">- Implement support for systems without transactional-update
- Require rmdir explicitly</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Also stop ignition-mount.service if there's no config</changelog>
  <changelog author="fvogt@suse.com" date="1603368000">- Change license to GPL-2.0-or-later</changelog>
</package>
<package pkgid="3bf6e2e30c1fa3f8a2681ce1bbda776a88d480dbbeba4202f17c7f6fe2b61e03" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.0.30" rel="150300.8.3.1"/>
  <changelog author="rhafer@suse.com" date="1585915200">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
</package>
<package pkgid="80caf7df87a6ea7dd8faa533b12a7bc195582b1212ba378f5cd514bbad3b5287" name="conntrack-tools" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="1.46"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.2
  * This release includes bugfixes and the connlabel support.</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new git snapshot 1.4.2.g26
  * Chromecast/SSDP support, SSDP userspace helper
  * TFTP userspace helper support
  * Support for attaching expectations via nfqueue
  * Fix directory lookup for helper plugins
  * Fixes a possible crash if conntrackd sees DCCP, SCTP and ICMPv6
  traffic and the corresponding kernel modules that track this
  traffic are not available. [bnc#942419, CVE-2015-6496]</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.4.3
  * conntrack: fix expectation entry creation
  * expect: Fix wrong memset usage
  * cthelper: don't pass up a 0 length queue
  * conntrackd: allow strings with underscore from flex scanner
  * conntrack: fix setting labels in updates</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.4.4
  * conntrackd: add systemd support
  * conntrack: support delete by label
  * conntrack: add support for netmask filtering
  * conntrack: add support for CIDR notation
  * conntrack: Add missing tables "dying" and "unconfirmed"
  to usage output.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- submission from lars@linux-schulserver.de, partially applied
- split out new subpackage "conntrackd" for the eponymous
  daemon (has systemd dependencies)
- add systemd service, logrotate config, sample sysconfig,
  and sample config file.</changelog>
  <changelog author="jengelh@inai.de" date="1521201600">- Add tirpc for openSUSE 15 and onwards.</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.4.5
  * new synproxy support
  * improved logging support (both stdout/stderr and log files)
  * new mDNS ct helper
  * deprecate unix backlog configuration
  * drop old/obsolete/deprecated conntrackd.conf config options
  * improved support for UPnP in the SSDP ct helper
  * add stronger TCP flags support
  * conntrack CLI tool: new support for IPv6 NAT
  * nfct CLI tool: some improvements to the build (-z lazy)</changelog>
  <changelog author="mkubecek@suse.cz" date="1563192000">- Fix 1.4.5 parser issues (bsc#1141480):
  conntrackd-use-strncpy-to-unix-path.patch
  conntrackd-Use-strdup-in-lexer.patch
  conntrackd-use-correct-max-unix-path-length.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1563883200">- conntrackd-cthelper-Add-new-SLP-helper.patch:
  userspace conntrack helper for SLP (Service Location Protocol) to
  replace SUSE specific kernel helper (rejected by upstream) from
  openSUSE / SLE kernel packages (FATE#324143 bsc#1127886)
- run autoreconf before build (patch above touches Makefile.am)
- add commented out conntrack helper config example to default
  conntrackd.conf
- drop deprecated (and ignored) options Nice and UNIX/Backlog from
  default conntrackd.conf</changelog>
</package>
<package pkgid="b0100770e13348c89a62d73eabd515e062ccd975d8efa94ab897759ef1134edc" name="container-selinux" arch="noarch">
  <version epoch="0" ver="2.171.0" rel="150300.1.10"/>
  <changelog author="kukuk@suse.com" date="1597060800">- Update to version 2.143.0
  - support containerd/cri</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Minimize BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1602676800">- Update to version 2.145.0
  - Add support for kubernetes_file_t
  - Allow container_t to open existing tun/tap</changelog>
  <changelog author="kukuk@suse.com" date="1603972800">- Update to version 2.150.0
  - Add additional allow rules for kvm based containers using
    virtiofsd.</changelog>
  <changelog author="lnussel@suse.de" date="1604404800">- Don't use BuildRequires based on shell script output. OBS can't
  evaluate that.</changelog>
  <changelog author="kukuk@suse.com" date="1610366400">- Update to version 2.154.0
  - Allow confined user domains to run confined container domains.
  - Allow all containers to use nfs shares, iff virt_use_nfs boolean
    is enabled.
  - Allow containers to read nsfs file systems.
  - KVM Container need to use tunnel sockets created by runtime.</changelog>
  <changelog author="kukuk@suse.com" date="1614081600">- Update to version 2.158.0
  - Add nfs remount support
  - Allow containers to execmod on nfs, samba and cephs remote shares
  - Allow confined users to send dbus messages to container_runtime</changelog>
  <changelog author="jsegitz@suse.com" date="1619179200">- Fix container runtime binary labels (bsc#1185030). You need to
  relable at least /usr/sbin if you're affected</changelog>
  <changelog author="jsegitz@suse.com" date="1628510400">- Update to version 2.164.2
  * Don't setup users for writing to pid_sockets
  * Allow container engines to be started from the staff user.
  * Allow spc_t domains to set bpf rules on any domain
  * Add support for k3s</changelog>
  <changelog author="rbrown@suse.com" date="1636718400">- Update to version 2.171.0
  * Define kubernetes_file_t as a config_type
  * Allow containers to be socket activated by user domains and by systemd.
  * Allow iptables to use fifo files of a container runtime
  * Allow container_runtime create all tmpfs content as container_runtime_tmpfs_t
  * Allow containers to create lnk_file on tmpfs_t directories.</changelog>
</package>
<package pkgid="60b7b79b2eb6e1eec7d0c84034d42fb05801fed6fa865377fd20cae540233238" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.4.12" rel="63.1"/>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
</package>
<package pkgid="53462e49988ca40559bf270d31c348df35621c52dbb0a9680073ca57a03a7d03" name="coolkey" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="1.31"/>
  <changelog author="sbrabec@suse.cz" date="1189425600">- Fixed file and directory permission flaw (#304180,
  CVE-2007-4129).</changelog>
  <changelog author="sbrabec@suse.cz" date="1193659200">- Fixed gcc 4.3 build errors.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239710400">- Fixed wrong C++ delete (bnc#443369, Redhat#485032).</changelog>
  <changelog author="sbrabec@suse.cz" date="1294660800">- Merged latest Fedora patches (bnc#661643).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Create baselibs.conf.
- Add PKCS11 module to p11-kit-32bit (bsc#996047#c39).</changelog>
  <changelog author="sbrabec@suse.com" date="1500292800">- Integrate latest Centos 7 patches [bsc#1049213]
  (coolkey-fix-token-removal-failure.patch,
  coolkey-piv-ecc-el7.patch, coolkey-1.1.0-noapplet.patch,
  coolkey-1.1.0-fix-spurious-event.patch,
  coolkey-1.1.0-p15.patch, coolkey-1.1.0-p15-coverity.patch,
  coolkey-1.1.0-more-keys.patch,
  coolkey-1.1.0-fail-on-bad-mechanisms.patch,
  coolkey-1.1.0-max-cpu-bug.patch,
  coolkey-1.1.0-rhel7-alt-cac.patch).
  * PK15 support.
  * Fix CAC card support.
  * Fix card removal issues.
- Use original tarball
  (coolkey-1.1.0.tar.bz2 -&gt; coolkey-1.1.0.tar.gz).
- Drop patch coolkey-null.patch. It is now part of
  coolkey-piv-ecc-el7.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1500638400">- Add nssdb installation scripts.
- Run spec-cleaner.
- Drop coolkey-1.1.0-evoandooo.patch: The patch does nothing now.
  Evolution and LibreOffice changed over time. They moved its
  directories and they don't use secmod.db any more.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Remove vision statement and development methods from description.</changelog>
</package>
<package pkgid="5bc2886c53775d19a7aef9b3b619ccc663169a97b7fdf27c0adcb8f8e44b3533" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150300.3.5.1"/>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
</package>
<package pkgid="b2b05c7ab03a280649a9f626be1417484e0fb6bda0592a1a37b2d244acf436e4" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.12" rel="3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1457006400">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="sflees@suse.de" date="1629115200">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Add another patch to fix regression (bsc#1189465)
  * fix-CVE-2021-38185_3.patch</changelog>
</package>
<package pkgid="cbd70e18514f40c868936a89df755c80d9fc59b845b859d5dd618ea5a3edd356" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.10" rel="3.6.1"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
  <changelog author="trenn@suse.de" date="1639483200">- bsc#1193557 - fixes:
  turbostat(version 20.09.30) started then immediately exit on AMD Zen machines
  A tools-power-turbostat-Fix-turbostat-for-AMD-Zen-CPUs.patch</changelog>
</package>
<package pkgid="ebaec3e4c481e025b014ab6cd611a6af1ff009f07fa1f0a6b1134b5e583263fa" name="cpuset" arch="noarch">
  <version epoch="0" ver="1.6" rel="3.3.1"/>
  <changelog author="mgalbraith@suse.com" date="1451476800">- Remove obsolete 'Authors' section from cpuset.spec.</changelog>
  <changelog author="lpechacek@suse.com" date="1452686400">- Update to ae629aa1dc95, release 1.5.7
- Deleted patches:
  Docu-fix-asciidoc-build-error.patch
  Docu-fixed-a-typo.patch
  Docu-remove-mention-about-nonexistent-option.patch
  Fix-crash-with-SCHED_IDLE-policy.patch
  Fix-typo-in-setup-py.patch
  Handle-unknown-scheduler-policy-codes-gracefully.patch
  Parse-proc-pid-stat-properly.patch
  Update-URLs-after-project-migration.patch
  cset-make-it-handle-cgroup-mounts.patch</changelog>
  <changelog author="idonmez@suse.com" date="1452686401">- Cleanup spec file
- Use source url</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="lpechacek@suse.com" date="1490356800">- Fix SLE 11 build in Devel project</changelog>
  <changelog author="lpechacek@suse.com" date="1518091200">- Update to 02ef9e09e1da, release v1.6pre1 (bsc#1079868)</changelog>
  <changelog author="tchvatal@suse.com" date="1522152000">- Do not require -devel but use only setuptools module
- Use ~ in version as without it the package is newer than
  release 1.6
- Reduce the compat py2/py3 choicer, SLE12 can be python3</changelog>
  <changelog author="lpechacek@suse.com" date="1544529600">- Update to 6c46d71a1c6e, release v1.6</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Use noun phrase in summary.</changelog>
  <changelog author="lpechacek@suse.com" date="1636718400">- Add cpuset-1.6-Fix_invalid_parentheses.patch to fix
  a semantic error. (bsc#1191418)</changelog>
</package>
<package pkgid="e9a2f8df054725649045dc14ae9e6f8d4a168f2e475aaad1853b42e873a9364d" name="cracklib" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="11.6.1"/>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="1b857bef4a3e6f73bfb8cd980322b322e75b8d55a49c2b97903b662826b2347b" name="cracklib-dict-full" arch="x86_64">
  <version epoch="0" ver="2.8.12" rel="1.22"/>
  <changelog author="mc@suse.de" date="1177329600">- full cracklib dictionary - splitted out from cracklib</changelog>
  <changelog author="mc@suse.de" date="1202817600">- update common password files</changelog>
  <changelog author="mc@suse.de" date="1213963200">- compress password database</changelog>
  <changelog author="mc@suse.de" date="1214568000">- update wordlist
- add german wordlists</changelog>
  <changelog author="mc@suse.de" date="1220270400">- do not zip the dict by default. A check takes too long.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mc@suse.de" date="1344513600">- correct License to LGPL-2.1</changelog>
</package>
<package pkgid="daf4f6be34c70986ce49554f3c46be15cc8465869c2f729830ccddd60d15d25b" name="cracklib-dict-small" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="11.6.1"/>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="713302f3abf573d73b2f5db64eb3f50e9012e5b8548cf566dd56bec54d3f0178" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="150300.3.5.1"/>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="lnussel@suse.de" date="1641902400">- reencrypt evil maid fixes (bsc#1194469, CVE-2021-4122,
  0001-CVE-2021-4122-fix.patch).</changelog>
  <changelog author="lnussel@suse.de" date="1642420800">- cryptsetup 2.3.7:
  * Fix possible attacks against data confidentiality through LUKS2 online
  reencryption extension crash recovery (CVE-2021-4122).
  * Improve internal metadata validation code for reencryption metadata.
  * Add updated documentation for LUKS2 On-Disk Format Specification</changelog>
</package>
<package pkgid="13339997597431c78d46eb40bcde063dde3b809ce92d616b007fcfe747f59965" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="3.26.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="4b325b0dee3e13332ef3031b7fead11da2a73a92c43ee3be3fe23eaedb4c3455" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.27.1"/>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="pmonreal@suse.com" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="50cb6ebe4de7385361df32c20497e922eeced7357ca104aa314ec86cd41f6b20" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="150300.4.6.1"/>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don?t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="varkoly@suse.com" date="1645444800">- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
  in plugins/sql.c (bsc#1196036)
  o add upstream patch:
    0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch</changelog>
</package>
<package pkgid="25e182328cb507ff7f2565f620434693e52acc75b176e1bb65a7ac049e4753c9" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="150300.4.6.1"/>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don?t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="varkoly@suse.com" date="1645444800">- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
  in plugins/sql.c (bsc#1196036)
  o add upstream patch:
    0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch</changelog>
</package>
<package pkgid="609155d7bf66520d27d109510df79deb16ff2b46ab3e09a9b359edaed2c9669e" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="150300.4.6.1"/>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don?t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="varkoly@suse.com" date="1645444800">- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
  in plugins/sql.c (bsc#1196036)
  o add upstream patch:
    0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch</changelog>
</package>
<package pkgid="e21c7514054676b9369ba5123e8b71336654a933e1521158dc7de7e0e196256d" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="bea87556fba52d2a1d9c7c04ebaefde111414665929dc47bec8f24425749958f" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.11.2"/>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="f5eca5b66922dfc0c5bc3994f1ae763cb46132ee37c28ee5205c94423c8bfe73" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.11.1"/>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="b26d7f0d607d0e6910f47f8592899b758a1631f124a1b828aa5addcac6a07210" name="dejavu-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="1.21"/>
  <changelog author="vlado.paskov@gmail.com" date="1308139200">- update to version 2.33
  * added Old Italic block to Sans
  * added U+051E, U+051F to Sans
  * added U+01BA, U+0372-U+0373, U+0376-U+0377, U+03CF, U+1D00-U+1D01,
    U+1D03-U+1D07, U+1D0A-U+1D13, U+1D15, U+1D18-U+1D1C, U+1D20-U+1D2B,
    U+1D2F, U+1D3D, U+1D5C-U+1D61, U+1D66-U+1D6B, U+1DB8, U+1E9C-U+1E9D,
    U+1EFA-U+1EFB, U+2C60-U+2C61, U+2C63, U+A726-U+A73C, U+A73E-U+A73F,
    U+A746-U+A747, U+A74A-U+A74B, U+A74E+U+A74F, U+A768-U+A769,
    U+A77B-U+A77C, U+A780-U+A787, U+A790-U+A791, U+A7FA-U+A7FF to Serif
  * added alternate forms to U+014A and U+01B7 in Serif
  * typographical improvements to U+0166-U+0167, U+0197, U+01B5-U+01B6,
    U+01BB, U+0222-U+0223, U+023D, U+0250-U+0252, U+026E, U+0274, U+028F,
    U+029F, U+02A3-U+02A5, U+02AB, U+03FE-U+03FF, U+1D02, U+1D14,
    U+1D1D-U+1D1F, U+1D3B, U+1D43-U+1D46, U+1D59, U+1D9B, U+2C71, U+2C73 in Serif
  * fixed bugs #31762 and #34700 plus other small fixes
    (wrong direction, duplicate points, etc.) for Sans and Serif
  * added U+204B to Mono
  * added U+26E2 to Sans
  * added Playing Cards block (U+1F0A0-U+1F0DF) to Sans
  * emoticons in Sans: replace U+2639-U+263B with better versions,
    add U+1F601-U+1F610, U+1F612-U+1F614, U+1F616, U+1F618,
    U+1F61A, U+1F61C-U+1F61E, U+1F620-U+1F624, U+1F625,
    U+1F628-U+1F62B, U+1F62D, U+1F630-U+1F633, U+1F635-U+1F640
  * added U+A78E, U+A790-U+A791 to Sans and Mono
  * added U+A7FA to Sans
  * subscripts: added U+2095-U+209C to Sans, Serif and Mono,
    adjusted U+1D49-U+1D4A in Sans and Mono
  * added U+0243 to Mono
  * adjusted U+0307 to match dot of i, replaced dotaccent U+02D9 with
    U+0307 in most dependencies in Sans
  * adjusted anchors of f and added them to long s in Sans
  * added anchors to precomposed dependencies of D and d
  * added debug glyphs U+F002 and U+F003 which will show current point size
  * use correct version for Serbian italic be
  * added pictograms U+1F42D-U+1F42E, U+1F431, U+1F435
  * improved Hebrew in Sans
  * improved Armenian in Sans, and added Armenian in Serif and Mono
  * remove "locl" feature for Romanian for S/T/s/t with cedilla/comma accent
  * replace wrong "dflt" script tag in Mono with "DFLT"</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed dejavu -&gt; dejavu-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1325592000">- license update: SUSE-Permissive
  Use this SPDX proprietary extension tag until upstream SPDX adopts a
  permissive category</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377518400">- Update to 2.34:
  * This release includes the addition of Lisu, an update of Georgian,
    the addition of some symbols and the addition and modification
    of several Latin characters.
  * Sans, SansMono, Serif: unlinked references of U+2596 for bug 50848
  * Sans, SansMono, Serif: added U+A7AA
  * Sans, SansMono, Serif: added U+2A6A, U+2A6B, U+2E1F based on U+223B
  * Sans, Serif: removed superfluous ligature definitions for
    ffl und ffi (bug 55363)
  * Sans, Serif: swapped glyphs for U+25D2 and U+25D3 (bug 55197)
  * Sans, Serif: added U+A740, U+A741
  * Sans: added U+20BA Turkish Lira sign
  * Sans: replaced Georgian Asomtavruli U+10A0-U+10C5 and Mkhedruli
    U+10D0-U+10FC with new version
  * Sans: added Georgian Nuskhuri U+2D00-U+U+2D25
  * Sans: added Private Use Area glyphs for Georgian U+F400-U+F441
  * Sans: tweaked U+0250, U+0254
  * Sans: adjusted hinting of U+032C-U+032D, avoiding problem on
    some platforms
  * Sans: added U+A7A0-U+A7A9, pre-1921 Latvian letters with
    oblique stroke
  * Sans: added anchors to U+2C6D
  * Sans: added cedilla anchor to some Latin characters
  * Sans: added ogonek anchor to A, E, O, U, Y
  * Sans: adjusted ogonek reference in U+0172, U+01EA, U+01EB
  * Sans: added anchors to U+0104, U+0105
  * Sans: added U+1F600, U+1F611, U+1F615, U+1F617, U+1F619,
    U+1F61B, U+1F61F, U+1F626-U+1F627, U+1F62E-U+1F62F, U+1F634
  * Sans: replaced U+27A1 with mirror image of U+2B05 for consistency
  * Sans: copied hints from U+14A3, U+14A7 to U+2142-U+2143
  * Sans: added Lisu block
  * Sans: typographical improvements to U+0166-U+0167, U+02A6, U+02AA
  * Sans: slightly change hinting of "2" to fix bug 37395
  * Sans: fixed U+1444 which had wrong top dot that shouldn't be there
  * Sans: added anchors for diacritics to U+01B7, U+01B8, U+01B9, U+0292
  * Sans: added U+01B7, U+01B8 to context for case diacritics above
  * SansMono: fixed U+0574
  * SansMono: added U+2016, U+27C2
  * SansMono: added U+02CE, U+02CF
  * SansMono: added U+2148, U+27E6-U+27E7, U+2B05-U+2B0D, U+1D55A
  * Serif: added U+02BA, U+02C2-U+02C5, U+02CA-U+02CB, U+02D7, U+02F3,
    U+02F7, U+046C-U+046D, U+0476-U+0477, U+1D7C-U+1D7F, U+20B8, U+2132,
    U+214E, U+2C7B to Serif
  * Serif: typographic improvements to U+0194, U+01B1, U+0263, U+028A,
    U+02A6, U+02A8, U+02AA, U+02E0, U+03DC, U+1D3B, U+1D7B
  * Serif: added small cap versions of q, x (in italic styles), delta,
    theta, xi, sigma, phi, omega, not wired in yet
  * Serif: added anchors to U+0234-U+0236
  * Serif: added U+02EC, U+02EF, U+02F0, U+0360</changelog>
  <changelog author="cornelis@solcon.nl" date="1437048000">- Update to 2.35:
  * For details see: http://dejavu-fonts.org/wiki/Changelog</changelog>
  <changelog author="sflees@suse.de" date="1470052800">- Update to 2.37
  * Changes from 2.36 to 2.37
  * Fix issue with empty glyphs in condensed typefaces in the released source files.
  * Changes from 2.35 to 2.36
  * Math: added DejaVu Math Tex Gyre by B. Jackowski, P. Strzelczyk and P. Pianowski (on behalf of TeX users groups)
  * Sans: removed dot of U+06BA in all forms
  * Sans: fixed position of three dots of U+06BD in init and medi forms (by Denis Jacquerye)
  * Sans: corrected direction of contours in U+05E7 (by Lior Halphon]])
  * Sans: added U+1F643 (by Olleg Samoylov)
  * Serif: moved up U+0360-0361 (by Gee Fung Sit ???]])
  * Serif: increased spacing of Roman numerals U+2161-2163, U+2165-2168, U+216A-216B (by Gee Fung Sit ???)
  * Serif: fixed anchor position of U+00E6 (by Gee Fung Sit ???)
  * Sans: fixed vertical position of U+20BA (by Gee Fung Sit ???)
  * Sans, Serif: fixed glyph height of Block Elements (by Gee Fung Sit ???)
  * Sans, Serif: added U+A698-A699 (by Gee Fung Sit ???)
  * Sans, Mono, Serif: added U+037F (by Gee Fung Sit ???)
  * Mono: added U+0376-0377, U+037B-037D (by Gee Fung Sit ???)
  * Serif: removed duplicate point from U+1D05 (by Gee Fung Sit ???)
  * Mono: added U+20BA, U+20BD (by Gee Fung Sit ???)
  * Sans: Added moon symbols U+1F311-1F318 (by Ben Laenen)</changelog>
</package>
<package pkgid="e4383604b2f91cc7fbd6f815c793a5daef363fd099ce99438edd18b8e356927c" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.39.1"/>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
</package>
<package pkgid="53ceccd1e671e8577939c89f7942475a02ad8b80c3628ac5ff4434d0ccec2817" name="dialog" arch="x86_64">
  <version epoch="0" ver="1.3" rel="3.3.7"/>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="0740cc349575f46e774506c52a21c1393a97adb628d0c1fcc4945fc906b8b77b" name="diffutils" arch="x86_64">
  <version epoch="0" ver="3.6" rel="4.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="christian.voegl@suse.com" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="f7b2aa9381c1a84d8befd521a4280341b1dddf4c3b48e7ffe77ceb90a08c3b1b" name="distribution-logos-SLE" arch="noarch">
  <version epoch="0" ver="20220315" rel="150300.1.1"/>
  <changelog author="jtomasiak@suse.com" date="1647345600">- Initial package version (bsc#1197224)
- This package provides distribution-logos to match openSUSE
  approach and keep brand images separate from other branding
  files (e.g. CSS) which can be submitted to respective upstream
  projects.</changelog>
</package>
<package pkgid="ba852e0555b1f334d6f172e9ebeb1bdd95cf437c64c4f4fa5869316f20845df4" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.2" rel="9.11.1"/>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="561e2500f84e107c73091df9d0ac94bc8188bb75e32f290a822eacfe0fd0eeed" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.86" rel="7.17.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Fix building with lua54</changelog>
  <changelog author="dmueller@suse.com" date="1612785600">- update to 2.84:
  * Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH
  * Tidy initialisation in hash_questions.c
  * Optimise sort_rrset for the case where the RR type
  * Move fd into frec_src</changelog>
  <changelog author="max@suse.com" date="1618833600">- Update to 2.85:
  * Fix problem with DNS retries in 2.83/2.84.
  * Tweak sort order of tags in get-version.
  * Avoid treating a --dhcp-host which has an IPv6 address as
    eligible for use with DHCPv4 on the grounds that it has
    no address, and vice-versa.
  * Add --dynamic-host option: A and AAAA records which take their
    network part from the network of a local interface. Useful
    for routers with dynamically prefixes.
  * Teach --bogus-nxdomain and --ignore-address to take an IPv4
    subnet.
  * CVE-2021-3448, bsc#1183709: Use random source ports where
    possible if source addresses/interfaces in use.
  * Change the method of allocation of random source ports for DNS.
  * Scale the size of the DNS random-port pool based on the
    value of the --dns-forward-max configuration.
  * Tweak TFTP code to check sender of all received packets, as
    specified in RFC 1350 para 4.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="max@suse.com" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="max@suse.com" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Use systemd-sysusers from 15.3 onwards</changelog>
  <changelog author="max@suse.com" date="1637236800">- bsc#1192529, dnsmasq-resolv-conf.patch:
  Fix a segfault when re-reading an empty resolv.conf
- Remove "nogroup" membership from the dnsmasq user.</changelog>
</package>
<package pkgid="f3ccb5b5c107505f9a22cdef32dbe5ee1f5f28231cf872b8342e00af0954cc23" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.12_ce" rel="159.1"/>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
</package>
<package pkgid="33de456f01d410500c680f045a463cb62048d3b71d04b9ef0dfd271c0fa6109a" name="docker-libnetwork" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2908_55e924b8a842" rel="4.31.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="asarai@suse.com" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="asarai@suse.com" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to libnetwork 153d0769a118, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Update to libnetwork 026aabaa6598, which is required for Docker 19.03.12-ce.</changelog>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="c3d8421e143836c82189f51d0e07ec2cf2818c5b7d5408ed7faa552fa9becbf1" name="docker-runc" arch="x86_64">
  <version epoch="0" ver="1.0.0rc10+gitr3981_dc9208a3303f" rel="6.45.3"/>
  <changelog author="asarai@suse.com" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="asarai@suse.com" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="asarai@suse.com" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="asarai@suse.com" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="asarai@suse.com" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to runc v1.0.0-rc10, which is required for Docker 19.03.11-ce.
  bsc#1172377
- Remove upstreamed patches:
  - CVE-2019-16884.patch
  - CVE-2019-19921.patch
- Synchronise patches with 'runc' package:
  + bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  * bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
</package>
<package pkgid="4cb9f4da61c0060d83b7cba497d8b1c29fe4a1e048828255877fa4ae51d690cc" name="dosfstools" arch="x86_64">
  <version epoch="0" ver="4.1" rel="3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1395057600">- updated to 3.0.26:
  * Fix "odd" files created by frequent power-loss.</changelog>
  <changelog author="pgajdos@suse.com" date="1403784000">- added fsck.{v,}fat and mkfs.{v,}fat compat symlinks in /sbin
  [bnc#884516]
- call spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="pgajdos@suse.com" date="1421409600">- updated to 3.0.27:
  * fsck.fat: Don't print version string every time -v is
    encountered
  * Fix attempt to rename root dir in fsck due to uninitialized
    fields
  * Support long file names in volume labeling code
- upstream changed</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- fix url</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 3.0.28
  * mkfs.fat now allows choosing 0xF0 as the media byte which was
    previously rejected.
  * mkfs.fat now supports the --invariant option to facilitate
    testing mkfs.fat itself.
  * Bugs fixed in fsck.fat are a read one byte beyond the end of
    an allocated array when checking some FAT12 filesystems, and
    checking that the first cluster of a file as specified in the
    directory entry is not 1.
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 4.0
  * Switch build system to autotools.
  * Fixed data corruption errors in fsck.fat Writing to the third
    to last cluster on FAT12 with an odd number of clusters would
    corrupt the following cluster.
  * The automatic alignment of data clusters that was added in
    3.0.8 and broken for FAT32 starting with 3.0.20 has been
    reinstated.
- Small spec file cleanup
- Drop no longer needed dosfstools-suse-dirs.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1485432000">- Update to version 4.1:
  * Now the default for mkfs for filesystems smaller than 512 MB is
    64 / 32 sectors
  * The parsing of octal character specifications for filenames in
    the -u and -d 25 options of fsck now works.
  * Fixed a possible fatlabel crash when writing a label to an
    unlabelled filesystem
  * Testsuite is now available</changelog>
  <changelog author="mcepl@suse.com" date="1622030400">- Add fix-calculation.patch (gh#dosfstools/dosfstools#153, bsc#1172863)
  to work with different size of clusters.</changelog>
  <changelog author="sbrabec@suse.com" date="1640088000">- To be able to create filesystems compatible with previous
  version, add -g command line option to mkfs (boo#1188401,
  dosfstools-add-g.patch).
- BREAKING CHANGES:
  After fixing of bsc#1172863 in the last update, mkfs started to
  create different images than before. Applications that depend on
  exact FAT file format (e. g. embedded systems) may be broken in
  two ways:
  * The introduction of the alignment may create smaller images
    than before, with a different positions of important image
    elements. It can break existing software that expect images in
    doststools &lt;= 4.1 style.
    To work around these problems, use "-a" command line argument.
  * The new image may contain a different geometry values. Geometry
    sensitive applications expecting doststools &lt;= 4.1 style images
    can fails to accept different geometry values.
    There is no direct work around for this problem. But you can
    take the old image, use "file -s $IMAGE", check its
    "sectors/track" and "heads", and use them in the newly
    introduced "-g" command line argument.</changelog>
</package>
<package pkgid="72196270642dd6358beaf8fb1a3210db55b9196dff505ddc480dbc9fd7f111fa" name="dracut" arch="x86_64">
  <version epoch="0" ver="049.1+suse.228.g07676562" rel="3.54.1"/>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
  <changelog author="thomas.blume@suse.com" date="1639051200">- Update to version 049.1+suse.218.gca24e614:
  * fix(iscsi): add iscsi-init.service requirements (bsc#1193512)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1641902400">- Update to version 049.1+suse.224.gd285ddd8:
  * fix(dracut.spec): change util-linux-systemd version for SLE15-SP2 (bsc#1194162)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642680000">- Update to version 049.1+suse.228.g07676562:
  * fix(network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(install): handle builtin modules (bsc#1194716)</changelog>
</package>
<package pkgid="543810a1b0e646711f068aec6b38a657f06469fc2cb4e019ee790a917441868e" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="049.1+suse.228.g07676562" rel="3.54.1"/>
  <changelog author="thomas.blume@suse.com" date="1623844800">- Update to version 049.1+suse.192.g00425ead:
  * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
  * fix(suse-initrd) fix list of modprobe.d directories
  * fix(install): handle $LIB in ldd output parsing (bsc#1185615)</changelog>
  <changelog author="thomas.blume@suse.com" date="1623931200">- Update to version 049.1+suse.196.g8706843b:
  * fix(suse-initrd): restore INITRD_MODULES in mkinitrd script
  * fix(suse-initrd): call dracut_instmods with hostonly=</changelog>
  <changelog author="thomas.blume@suse.com" date="1626177600">- Update to version 049.1+suse.203.g8ee14a90:
  * fix(suse-initrd): use $kernel rather than $(uname -r)
  * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
  * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  * docs: fix reference to insmodpost module (bsc#1187774)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916800">- Update to version 049.1+suse.207.g72a93d93:
  * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)
  * fix: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (bsc#1184970)</changelog>
  <changelog author="thomas.blume@suse.com" date="1632916801">- Update to version 049.1+suse.209.gebcf4f33:
  * fix(systemd): add unit files for systemd-coredump (bsc#1190845)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1635163200">- Update to version 049.1+suse.213.g346cf20c:
  * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
  * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)</changelog>
  <changelog author="thomas.blume@suse.com" date="1636545600">- Update to version 049.1+suse.216.gf705637b:
  * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
  * fix(iscsi): add iscsid.service requirements
    (bsc#1187190)</changelog>
  <changelog author="thomas.blume@suse.com" date="1639051200">- Update to version 049.1+suse.218.gca24e614:
  * fix(iscsi): add iscsi-init.service requirements (bsc#1193512)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1641902400">- Update to version 049.1+suse.224.gd285ddd8:
  * fix(dracut.spec): change util-linux-systemd version for SLE15-SP2 (bsc#1194162)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642680000">- Update to version 049.1+suse.228.g07676562:
  * fix(network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(install): handle builtin modules (bsc#1194716)</changelog>
</package>
<package pkgid="657e634662a1a13c53e243dbf916f3caf848a4d7b70c35f529c267d79d7f9fa9" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.16" rel="3.47.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 ? 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 ? 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
</package>
<package pkgid="c23f24f80f46d9444e95cd7ac662908c2ec4d4ab8c731085811a2e81c2109b58" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.16" rel="3.47.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 ? 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 ? 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
</package>
<package pkgid="32ebed15852b8316a1d6afcf70d956a8e22b7507bf7b2cd7cfcb2617827ad0ac" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.16" rel="3.47.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 ? 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 ? 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
</package>
<package pkgid="ca540e80c54b9bbf1c1beed37188ca46c8b57191edab218090e94f3e050109bf" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.0.0~rc2" rel="150300.1.1"/>
  <changelog author="iforster@suse.com" date="1630929600">- Version 3.5.3
  - t-u: Purge kernels as part of package operations
    Required for live patching support [bsc#1189728]</changelog>
  <changelog author="iforster@suse.com" date="1631361600">- Version 3.5.4
  - tukit: Fix resolved support [boo#1190383]</changelog>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]</changelog>
</package>
<package pkgid="7c96e4f87964d1954015217e41e7e8f8130a399fa2be56746a9ae4f8c6a66b13" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="4.26.1"/>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="jack@suse.cz" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="jack@suse.cz" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="jack@suse.cz" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="jack@suse.cz" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="e6e9408ae45ca0a34a7b5321ac4fce1a8d7ff5db07511cc1af9b34ec28b6ed57" name="ebtables" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 2.0.11
  * Add --noflush command line support for ebtables-restore
  * Do not print IPv6 mask if it is all ones
  * Allow RETURN target rules in user defined chains
  * ebt_ip: add support for matching ICMP type and code
  * ebt_ip: add support for matching IGMP type
  * extensions: Add string filter to ebtables
  * Print IPv6 prefixes in CIDR notation
  * extensions: Add AUDIT target
  * Fix incorrect IPv6 prefix formatting
- Drop ebtables-v2.0.8-makefile.diff (no longer needed)
- Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch
  (not applicable)
- Drop ebtables-v2.0.10-4-audit.patch,
  0001-fix-compilation-warning.patch,
  0001-Use-flock-for-concurrent-option.patch,
  0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1575979200">- add ebtables.keyring as a Source</changelog>
  <changelog author="kstreitova@suse.com" date="1578657600">- rename /usr/lib/ebtables helper file to /usr/lib/ebtables-helper
  otherwise it conflicts with /usr/lib/ebtables library directory
  on 32-bit systems [bsc#1159769]</changelog>
  <changelog author="kukuk@suse.com" date="1588161600">- Use /bin/sh for ebtables.systemd
- Don't hard require systemd, we don't need that in a container</changelog>
  <changelog author="kukuk@suse.com" date="1588680000">- Revert last /bin/bash -&gt; /bin/sh change</changelog>
  <changelog author="kstreitova@suse.com" date="1598961600">- replace /usr/lib with /usr/libexec in .service files to follow
  %_libexecdir macro changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1599048000">- Have the source .service file hold a placeholder for LIBEXECDIR,
  which we replace during build/install phase, allowing the package
  to be used no matter what value %{_libexecdir} has.</changelog>
</package>
<package pkgid="f114f303f29499d40420eef82596ae96e01843a48a715bcd4b3512f7b5e4b441" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="14" rel="4.3.2"/>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. (boo#1025520)
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  (fate#322108)
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="7cde7d135023efc4c205c928ed0b3238a5bc6e2328365e58c0e48eba07e73f44" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.168" rel="4.5.3"/>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="jmoreira@suse.com" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="549ac42a6ad8002e8a7a1fbc4169544365e611e4b4aef4d67f1669e4a0f5b4fe" name="ethtool" arch="x86_64">
  <version epoch="0" ver="5.9" rel="1.31"/>
  <changelog author="mkubecek@suse.cz" date="1509364800">- Update to new upstream release 4.13
  * Feature: add support for HWTSTAMP_FILTER_NTP_ALL
  * Feature: Add DMA Coalescing support
  * Feature: Remove UDP Fragmentation Offload error prints
  * Feature: stmmac: Add DMA HW Feature Register
  * Fix: Do not return error code if no changes were attempted.
  * Fix: Fix formatting of advertise bitmask
  * Fix: fix the rx vs tx mixup in set channel message</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929600">- add backported post-4.13 upstream fixes (bsc#1088294):
  ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
  ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
  ethtool-show-VF-and-queue-in-the-help-for-N.patch
  ethtool-correct-VF-index-values-for-the-ring_cookie-.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929601">- use %license rather than %doc for license file (bsc#1082318)</changelog>
  <changelog author="mkubecek@suse.cz" date="1522929602">- add warning that changes should be submitted via git (i.e. not
  directly to IBS) to the specfile
- drop BuildRoot (no longer needed in SLE15)
- drop BuildRequire for xz (no longer needed in SLE15)</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209600">- fix stack clash for PHY tunables (bsc#1092037):
  ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
- sync UAPI header copies with SLE15 kernel:
  Revert-ethtool-Add-DMA-Coalescing-support.patch
  ethtool-copy.h-sync-with-net-next.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209601">- add support for RSS contexts (fate#326122 bsc#1105557):
  ethtool-copy.h-sync-with-net-next-2.patch
  ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
  ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1540209602">- add support for FEC parameters (fate#326122 bsc#1105557):
  ethtool-Support-for-FEC-encoding-control.patch
  ethtool-support-combinations-of-FEC-modes.patch
  ethtool-better-syntax-for-combinations-of-FEC-modes.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1573041600">- upgrade to upstream version 5.3 (jsc#SLE-7328)
  * drop mainline backports contained in v5.3
    Revert-ethtool-Add-DMA-Coalescing-support.patch
    ethtool-Support-for-FEC-encoding-control.patch
    ethtool-add-support-for-extra-RSS-contexts-and-RSS-s.patch
    ethtool-better-syntax-for-combinations-of-FEC-modes.patch
    ethtool-copy.h-sync-with-net-next-2.patch
    ethtool-copy.h-sync-with-net-next.patch
    ethtool-correct-VF-index-values-for-the-ring_cookie-.patch
    ethtool-correct-display-of-VF-when-showing-vf-queue-.patch
    ethtool-don-t-fall-back-to-grxfhindir-when-context-w.patch
    ethtool-fix-MFLCN-register-dump-for-82599-and-newer.patch
    ethtool-fix-stack-clash-in-do_get_phy_tunable-and-do.patch
    ethtool-show-VF-and-queue-in-the-help-for-N.patch
    ethtool-support-combinations-of-FEC-modes.patch
    ethtool.8-Document-RSS-context-control-and-RSS-filte.patch
  * provide bash completion
- minor specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- upgrade to upstream version 5.9 (jsc#SLE-15156, bsc#1178633)
- ethtool.spec:
  * minor cleanups from Factory package
  * drop compiler warnings suppression which is no longer needed
  * replace "-W" compiler option with preferred form "-Wextra"
- ethtool.keyring: add new upstream maintainer's key</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009601">- backport post-5.9 fixes (bsc#1178633)
  * netlink-fix-use-after-free-in-netlink_run_handler.patch
  * netlink-fix-leaked-instances-of-struct-nl_socket.patch
  * netlink-do-not-send-messages-and-process-replies-in-.patch
  * ethtool-Improve-compatibility-between-netlink-and-io.patch</changelog>
</package>
<package pkgid="5510aac8f8748da407ab53685e9cbb0e7a49f901d03ebeb78f2b7166e23da406" name="fcoe-utils" arch="x86_64">
  <version epoch="0" ver="1.0.34" rel="12.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1477310400">- Fix fcoeadm-t crash when other FC storage is present (bsc#1006027)
  * 0014-fcoeadm-target-segfault-with-other-fc-storage-present.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1486641600">- Update to latest upstream release (FATE#320515)
    Remove the following upstreamed patches:
  0007-fipvlan-clean-up-state-machine-for-pfd_add.patch
  0009-fcoemon.c-Add-a-check-to-verify-if-dcbd-is-to-be-ini.patch
  0010-fcoemon-fixup-log_nlmsg_error.patch
  0011-fcoemon-Add-debugging-message-for-recv.patch
  0013-Fallback-to-default-MAC-address-for-FIP.patch
  0014-fcoeadm-target-segfault-with-other-fc-storage-present.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1491912000">- Disable Werror when building to work around a new GCC 7 warning. (bsc#1030244)
  + 0009-disable-Werror-building.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dimstar@opensuse.org" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="lduncan@suse.com" date="1585915200">- Change use of "ifconfig" to "ip", since ifconfig is no
  longer around (bsc#1073886), adding:
  * fcoe-utils-stop-using-ifconfig.patch</changelog>
  <changelog author="lduncan@suse.com" date="1591704000">- Updated with latest upstream v1.0.33 from v1.0.32:
  * Added "-Wextra" and enabled "-Werror" for compiling
  * Ignore auto-generated files
  * Update systemd service files (several updates)
  * A bunch of gcc-10-related fixes, such as marking unused
    arguments, fixing strncpy()s, string truncation/overflow
  * better error handling/retry for link issues (like EBUSY)
  * replace use of "ifconfig" with "ip" in debug scripts
  * fix long-standing issue with netlink buffer resizing
  * move bash completions to proper system directory
  This replaces fcoe-utils-v1.0.32.tar.xz with
  fcoe-utils-v1.0.33.tar.xz, and it does away with the
  following patches, since they are all fixed upstream:
  * 0003-systemctl-cannot-start-fcoemon.socket.patch
  * 0004-fcoemon-Correctly-handle-options-in-the-service-file.patch
  * 0005-fcoe.service-Add-foreground-to-prevent-fcoemon-to-be.patch
  * 0006-fipvlan-fixup-return-value-on-error.patch
  * 0008-Use-correct-socket-for-fcoemon.socket.patch
  * 0012-fcoemon-Retry-fcm_link_getlink-on-EBUSY.patch
  * fcoe-utils-1.0.29-make.patch
  * fcoe-utils-stop-using-ifconfig.patch
  And the following patch was removed because we can
  successfully compile with "-Werror" now:
  * 0009-disable-Werror-building.patch</changelog>
  <changelog author="lduncan@suse.com" date="1594814400">- Handle NIC names longer than 7 characters for the output of
  "fcoeadm -s" output (bsc#1010047), adding patch:
  * Handle-NIC-names-longer-than-7-characters.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1597924800">- Add patch to fix build on architectures where char is
  unsigned (%arm, aarch64):
  * fcoe-utils-fix-arm.patch</changelog>
  <changelog author="lduncan@suse.com" date="1616673600">- Update to version 1.0.34 (fixing bsc#1182804), which replaces the
  source tarball, and removes these two patches, which are fixed
  upstream:
  * Handle-NIC-names-longer-than-7-characters.patch
  * fcoe-utils-fix-arm.patch
  Change summary:
    Chris Leech (6):
  21 string-op truncation, format truncation, and format overflow errors
  use of uninitialized values detected during LTO
  Revert "Make gcc compiler happy about ifname string truncation."
  fix VLAN device name overflow check
  fix regressions caused by safe_makepath change in libopenfcoe.c
  minor fcoeadm output issues
    Guillaume Gardet (1):
  char can be unsigned on arm, so set signed explicitly as the check expects it can be negative
    Lee Duncan (6):
  Handle NIC names longer than 7 characters.
  Change debug-&gt;log message if daemon running
  Remove references to open-fcoe.org
  Fix two gcc-11 compiler warnings.
  Remove comment that doesn't match code.
  Preparing for version v1.0.34
    Lily Nie (1):
  fix one bug introduced by commit b06c3df
    Nitin U. Yewale (1):
  Exit fcoemon command if fcoemon daemon is already running.</changelog>
</package>
<package pkgid="95f67d4201995db0556342dffd838ddac95816c970c3a1cfdd96a1b5852c2d4e" name="fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150300.1.11"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
</package>
<package pkgid="64ada342c9516efa69c954466320aa4053c15c5f501e937536c239a339bbc839" name="fdo-client-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150300.1.11"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
</package>
<package pkgid="274a693a9d9d7a945338046dbc7ccf08e15590045c96c003cdd4db3c8cfa7420" name="file" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.14.1"/>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
  <changelog author="werner@suse.de" date="1631016000">- Add patch bsc1189996-9fbe768a.patch to fix bsc#1189996</changelog>
</package>
<package pkgid="6bd9157135ec29974403280efa16a01cdde03e62bce6780d6a84a4b886a7a1dc" name="file-magic" arch="noarch">
  <version epoch="0" ver="5.32" rel="7.14.1"/>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
  <changelog author="werner@suse.de" date="1631016000">- Add patch bsc1189996-9fbe768a.patch to fix bsc#1189996</changelog>
</package>
<package pkgid="3ece7333683212a87ef68b9e21932227073efe425365babd94c975dfeca719a7" name="filesystem" arch="x86_64">
  <version epoch="0" ver="15.0" rel="5.1"/>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
  <changelog author="kukuk@suse.com" date="1599220800">- Split /var/tmp out of fs-var.conf, new file is fs-var-tmp.conf.
  Allows to override config to add cleanup options of /var/tmp
  [bsc#1078466]
- Create fs-tmp.conf to cleanup /tmp regular (required with tmpfs)
  [bsc#1175519]
- Fix bug about missing group in tmpfiles.d files
- Generic cleanup:
  - Remove /usr/local/games</changelog>
  <changelog author="lnussel@suse.de" date="1605528000">- /proc and /sys should be %ghost to allow filesystem package updates in
  rootless container environments (rh#1548403) (bsc#1146705)</changelog>
  <changelog author="kukuk@suse.com" date="1611921600">- Ignore postfix user (pulled in from buildsystem)</changelog>
  <changelog author="lnussel@suse.de" date="1611921601">- Set correct permissions when creating /proc and /sys</changelog>
  <changelog author="ro@suse.de" date="1612180800">- add /etc/skel/.cache with perm 0700 (bsc#1181011)</changelog>
  <changelog author="kukuk@suse.com" date="1612872000">- Remove duplicate line due to merge error</changelog>
  <changelog author="kukuk@suse.com" date="1614081600">- Remove /etc/init.d [jsc#SMO-14], /etc/cron.*, /selinux</changelog>
</package>
<package pkgid="f6d199553102ca8691fb4855f0ac321ebbf4aef35345beb2dfb46fb603070d11" name="fillup" arch="x86_64">
  <version epoch="0" ver="1.42" rel="2.18"/>
  <changelog author="aj@suse.de" date="1260705600">- Do not compile in date into binary to create reproduceable binaries.</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1305979200">- Open all file descriptors with O_CLOEXEC
- handle out-of-disk-space situations somewhat better.</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build workarounds: disable %build section testing, use fake
  gcc script to work around build system deficiencies</changelog>
  <changelog author="rschweikert@suse.com" date="1328702400">- place binary into /usr tree (UsrMerge project)</changelog>
  <changelog author="tchvatal@suse.com" date="1414324800">- Cleanup the mess in spec with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1414756800">- Keep /bin/fillup as a symlink in the package: there are hundreds
  of RPMs out there referencing it in the %post scriptlets, when
  any of the %*fillup* macros was used. Even updating the macro
  will not make the existing RPMs magically be fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1415016000">- Also return back the /bin/fillup provides line</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="7951dde6c0062c30a74b81f8bf86c2774e72751268b6776de1042fc57b1db0d6" name="findutils" arch="x86_64">
  <version epoch="0" ver="4.8.0" rel="1.20"/>
  <changelog author="mail@bernhard-voelker.de" date="1567080000">- Upgrade to 4.7.0.
- findutils.spec:
  - Change source compression from gzip to xz.
  - Align comments about how to bump the version.
  - Activate the signature checking via *.sig and keyring files.
  - Remove downstream hack in %check section to make a test executable.
- Delete obsolete patches:
  - disable-broken-tests.patch
  - gnulib-libio.patch
  - sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch
  - sysmacros.patch
- findutils-4.4.2-xautofs.patch: Refresh, and rename ...
- findutils-xautofs.patch: ... to this.</changelog>
  <changelog author="mliska@suse.cz" date="1574251200">- Add disable-null-ptr-test.patch in order to fix boo#1157342.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1591790400">- findutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- findutils.spec: Reference the patch.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1591876800">- findutils.spec: Avoid conditional Patch definition as this breaks
  cross-platform building from source RPMs.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1597147200">- findutils.keyring: Update GPG keys of Bob Proulx.
  Prompted by an error of 'osc service localrun download_files'.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598788800">- findutils-gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- findutils.spec: Reference the patch.
- disable-null-ptr-test.patch: Refresh with -p0.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1610193600">- Update to 4.8.0.
  Announcement: https://savannah.gnu.org/forum/forum.php?forum_id=9914
- findutils.spec:
  - Source0: Fix download URL: remove "pub/".
  - %check: Output the content of all test-suite files in case of errors.
- Remove now-upstream patches:
  - disable-null-ptr-test.patch
  - findutils-gnulib-disable-test-float.patch
  - findutils-gnulib-test-avoid-FP-perror-strerror.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610193601">- update upstream signing key
- remove deprecated texinfo packaging macros
- run spec-cleaner</changelog>
  <changelog author="christian.voegl@suse.com" date="1618833600">- Use new Group Release Keyring</changelog>
</package>
<package pkgid="f67b8fd004b6696e20a0439a84533b95415916e8aa180756293e4b29e4949541" name="fipscheck" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="9e22b7fa6c76e2f0bb21671810155690a9f57882a31b00f77a829a6d70e5dbcb" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="1.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new ?helper? element to replace ?module? More accurately represents the conntrack helper. Deprecates ?module?.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don?t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using ?port?
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify ?set-target values ?default? vs ?reject?
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don?t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of ?[P]? in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add ?zone is an invalid option with ?direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
</package>
<package pkgid="a9ffe522c266610d63d4aba31bf2d4f4b0cf5894b2cc1f2e8bf35f3aed3abf19" name="fontconfig" arch="x86_64">
  <version epoch="0" ver="2.12.6" rel="4.3.1"/>
  <changelog author="idonmez@suse.com" date="1457524800">- Add fontconfig-locale_c.utf8.patch to recognize C.UTF-8 locale,
  patch from Debian.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468238400">- Update to version 2.12.0:
  + Support the size specific design selection in OS/2 table
    version 5.
  + Allow the modification on 'lang' and 'charset' objects.
  + Increase the refcount in FcConfigSetCurrent().
  + some updates in orth files.
  + Add --error-on-no-fonts option to fc-cache.
  + Use lang=und instead of lang=xx for "undetermined".
  + Add FC_WEIGHT_DEMILIGHT and change from 65 to 55.
  + Add FC_COLOR.
  + Treat color fonts as scalable.
  + no FC_LANG added with FcConfigSubstitute() when it has "und".
  + Hardcode blanks in library.
  + Support symbol fonts.
  + Unicode 8.0 support.
  + Add hintstyle templates and default hintslight.
  + GX font support.
  + Improve the footprint issue on updating caches.
  + Bump the cache version to 6.
  + more bug fixes.</changelog>
  <changelog author="pgajdos@suse.com" date="1470916800">- Update to 2.12.1:
    Update CaseFolding.txt to Unicode 9.0
    Fix some errors related to python3
    Bug 96676 - Check range of FcWeightFromOpenType argument
    Update libtool revision
    Properly validate offsets in cache files.</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1488110400">- Add patch fontconfig-glibc-2.25.patch
  * Fixes build with glibc 2.25.</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- Update to 2.12.3:
    Don't call perror() if no changes happens in errno
    Fix FcCacheOffsetsValid()
    Fix the build issue with gperf 3.1
    Fix the build issue on GNU/Hurd
    Update a bit for the changes in FreeType 2.7.1
    Add the description of FC_LANG envvar to the doc
    Bug 101202 - fontconfig FTBFS if docbook-utils is installed
    Correct cache version info in doc/fontconfig-user.sgml
    Avoid conflicts with integer width macros from TS 18661-1:2014
    Fix PostScript font alias name
    Update aliases for URW June 2016
- removed unneeded:
  - fontconfig-glibc-2.25.patch
  - make-check.patch</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Remove --with-pic which is only useful for static libs.</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 2.12.4:
  * Various distcheck errors
  * FcCharSetHash(): use the 'numbers' values to compute the hash
  * fc-lang: gracefully handle the case where the last language initial is &lt; 'z'
  * Fix an off-by-one error in FcLangSetIndex()
  * Fix erroneous test on language id in FcLangSetPromote()
  * FcLangSetCompare(): fix bug when two charsets come from different "buckets"
  * Treat C.UTF-8 and C.utf8 locales as built in the C library
- Remove merged upstream fontconfig-locale_c.utf8.patch
- Remove fontconfig-doc archive, the generated output is already
  present in the upstream released tarball
- Remove unused configure options</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Update to 2.12.6:
  * conf.d: Drop aliases for (URW)++ fonts (upstreamed)
  * other minor fixes
- Includes changes from 2.12.5:
  * update docs
  * Accept 4 digit script tag in FcLangNormalize().
  * fc-blanks: fall back to the static data available in repo if
    downloaded data is corrupted
  * emoji related fixes
  * various cleanups
  * support listing named instances</changelog>
  <changelog author="pgajdos@suse.com" date="1516017600">- fc-query: remove redundant debug output
  + fontconfig-remove-debug-output.patch</changelog>
  <changelog author="meissner@suse.com" date="1590840000">- fontconfig-devel-32bit needs to require fontconfig-32bit,
  needed for Wine development (bsc#1172301)</changelog>
</package>
<package pkgid="6c37b5a18c5f59fb962cbf3f0b0904583f56063ff44fedb7ed224c3656557469" name="fuse" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.3.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="645fdbb5db95478761289dfb5c76a942d5ba93628c6c3f8153cf872eae45cbdb" name="fuse-overlayfs" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="3.9.1"/>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="7b6bb1e3db480a37de3d428be8b914e18bc6df377b627bc8c51ab6779353c35c" name="gawk" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="1.41"/>
  <changelog author="mpluskal@suse.com" date="1431000000">- Correct info files scriplet handling section
- Update info and update-alternatives requirements</changelog>
  <changelog author="astieger@suse.com" date="1431000001">- skip frequently failing and timing dependent test strftime</changelog>
  <changelog author="astieger@suse.com" date="1432382400">- GNU awk 4.1.3:
  * Regexp parsing with extra brackets should now be working again.
  * Updated to latest config.guess and config.sub.
  * bug fixes</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462363200">- new gawk_ppc64le_ignore_transient_test_time_failure.patch</changelog>
  <changelog author="astieger@suse.com" date="1473076800">* GNU awk 4.1.4:
  * z/OS support updated
  * debugger improvements
  * return value of system() enhanced to convey more information
  * two-way pipe handling improved
  * The -d option now allows -d- to print to standard output.
  * The DJGPP port is now officially deprecated.</changelog>
  <changelog author="josef.moellers@suse.com" date="1491825600">- Added an explicit rpmlint rule to keep one file (gawkapi.h)
  from requiring a separate package.
  [+gawk.rpmlintrc]</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- also ignore transient test time failure on ppc64</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508414400">- Update to gawk 4.2.0
  * If not in POSIX mode, changes to ENVIRON are reflected into
    gawk's environment
  * The series of numbers returned by rand() should now be "more
    random" than previously
  * Multiple changes related to the pretty printer
  * The igawk script and igawk.1 man page are no longer installed
  * Gawk now processes a maximum of two hexadecimal digits in \x
    escape sequences inside strings
  * Setting PROCINFO["redirection", "NONFATAL"] to true makes I/O
    errors for "redirection" not fatal
  * Gawk now supports retryable I/O via PROCINFO[input-file, "RETRY"]
  * Revisions in the POSIX standard remove the special case for POSIX
    mode when FS = " " where newline was not a field separator
  * Gawk now supports strongly typed regexp constants
  * The new typeof() function can be used to indicate if a variable or
    array element is an array, regexp, string or number
  * Optimizations are now enabled by default
  * Passing negative operands to any of the bitwise functions now
    produces a fatal error
  * The mktime function now accepts an optional second argument
  * The FIELDWIDTHS parsing syntax has been enhanced to allow specifying
    how many characters to skip before a field starts
  * The PROCINFO["argv"] array records all of gawk's command line arguments
    as gawk received them
- gawk_ppc64le_ignore_transient_test_time_failure.patch: removed</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508587200">- fold-string.patch: Don't fold constant strings if either is translatable</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- GNU awk 4.2.1:
  * documentation updates
  * In MPFR mode, When ROUNDMODE changes, string values for
    numerically type values will be redone
  * various bug fixes
  * drop fold-string.patch, upstream
- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="ef672fc341036afcd2d39549801b1bd5a396314cc1c465e39b022d762693786b" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.46.5" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 2.46.1:
  + Fix empty patterns which reference a fallback pattern with
    children.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571054400">- Update to version 2.46.2:
  + Patterns and gradients reused across more than one element will
    only get resolved once now; this should make things marginally
    faster for patterns or gradients with fallbacks.
  + glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
    loaded XML elements, and the number of referenced elements
    within an SVG document. This is to mitigate malicious SVGs
    which try to consume all memory, and those which try to consume
    an exponential amount of CPU time.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 2.46.3:
  + glgo#GNOME/librsvg#516: Fix inadvertent bump in the minimum
    Rust version required. The string_cache crate is now pinned to
    a version that still works on Rust 1.34.
  + glgo#GNOME/librsvg#521: Compute geometries correctly if there
    is a viewBox attribute.
  + glgo#GNOME/librsvg#308: Fix stack exhaustion with circular
    references in &lt;use&gt; elements.
  + Consistently use the LGPL 2.1 wherever it is mentioned.
- Drop COPYING, everything is covered by COPYING.LIB now.</changelog>
  <changelog author="yfjiang@suse.com" date="1573041600">- Remove BuildRequires rust-std. The replacement rust-std-static
  is already required by rust.</changelog>
  <changelog author="fvogt@suse.com" date="1573128000">- Add patches to fix coloring of symbolic icons (glgo#GNOME/librsvg#525):
  * 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  * 0002-Compute-the-specificity-of-CSS-selectors.patch
  * 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1573560000">- Fix incorrect obsoletes for rsvg-view.</changelog>
  <changelog author="yfjiang@suse.com" date="1573646400">- Add explicit conflicts between rsvg-convert and rsvg-view &lt;=2.45.7.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574683200">- Update to version 2.46.4:
  + Panic when reading an invalid stylesheet URL in an XML
    processing instruction.
  + Consider specificity when applying CSS selector matches.
  + Provide an usage example in the librsvg crate docs.
- Drop patches fixed upstream:
  + 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  + 0002-Compute-the-specificity-of-CSS-selectors.patch
  + 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1635163200">- Bump required rust version to rust-1.53, in order to avoid a ppc64le crash (bsc#1189304, bsc#1191114)</changelog>
</package>
<package pkgid="de4dd4e7ee66fa6e293b5eb5d02100e42e32137951089f8023cba50357b24440" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="3.3.1"/>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="yfjiang@suse.com" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="zcjia@suse.com" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="c2404b955f81da533560d60fc5d0143c1677d0e8c42faf5fe1621cf772cf2bd8" name="gettext-runtime" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="1.43"/>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO (boo#1138806).</changelog>
  <changelog author="jengelh@inai.de" date="1566561600">- Heed SLPP by placing libtextstyle.so.0 in the right package.
- Drop documentation from libtextstyle0, no one will read it there.
- Drop static library.
- Remove pointless ldconfig calls for libtextstyle-devel.
- Avoid pointless sh invocation of libtextstyle0 scriptlets.
- Avoid unnecessary |xargs rm.
- Remove redundant %clean section.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1572436800">- Remove autoreconf call (not required), and drop the no longer
  required libtool build dependency.</changelog>
  <changelog author="cvoegl@suse.de" date="1574769600">- Added xz to requires (boo#1141380)
- The previous update to 0.20.1 also fixes (boo#1113719)</changelog>
  <changelog author="cvoegl@suse.de" date="1576584000">- Add -lm to LDFLAGS (boo#1138806)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576929600">- Add missing Requires: libtextstyle0 in corresponding devel package,
  drop gettext-runtime Requires.
- Skip creation of shared libtextstyle in -mini flavor.
- Statically link to libtextstyle in -mini flavor, fixes
  broken bootstrap of gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579089600">- Add libtextstyle0 to baselibs.conf: gettext-runtime-32bit has a
  dependency on it, so we also need the library built as -32bit.</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Don't disable openmp with qemu, the emulation works now</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587902400">- update to 0.20.2:
  * The programs 'gettext', 'ngettext', when invoked with option -e,
    now expand '\\' and octal escape sequences, instead of
    swallowing them
  * xgettext now recognizes 'gettext' program invocations with the
    '-e' option, such as gettext -e 'some\nstring\n'
  * xgettext now assumes a Python source file is in UTF-8 encoding
    by default, as stated in PEP 3120
  * The value of the 'Icon' property is no longer extracted into
    the POT file by xgettext</changelog>
  <changelog author="christian.voegl@suse.com" date="1594123200">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="c1442c6f103e3372308b59497d090e3b845520d304fbeae0fe0f1b146cf6b985" name="gio-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="42.1" rel="lp153.2.22"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1525348800">- Update .gschema.override.in: referring the implementation of
  bsc#1077332, fully enable gnome-software notification which is
  now used on both leap15 and sle15 to replace the legacy g-s-d
  notification method (boo#1090042).</changelog>
  <changelog author="qkzhu@suse.com" date="1530273600">- Recommend sound-theme-freedesktop by both openSUSE and SLE.
  (bsc#1097595)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1541592000">- Update gnome_defaults: evince.desktop has been renamed to
  org.gnome.Evince.desktop with GNOME 3.30.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572264000">- Fix keyassignment for help: the schema was changed to array of
  strings, as multiple keys can now be bound.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572350400">- Add super+f1 key binding for help to match GNOME default.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1578398400">- Update .gschema.override.in:
  + Delete unused settings-daemon.plugins.power keys.
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for SLE to be consistent with old versions (bsc#1158497).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1584100800">- Update .gschema.override.in:
  + Set sleep-inactive-ac-timeout, sleep-inactive-battery-timeout to
    0 for Leap to be consistent with SLE and old versions (bsc#1158497).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1589803200">- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1600430400">- Only recommend wallpaper-branding-%{branding_name} when
  gnome-shell is present. Allows gio to be installed on text-only
  systems without pulling wallpapers in (boo#1162600).</changelog>
</package>
<package pkgid="8b78bda934cfcbc94be71aa71be6505e928a0c687533778a7c93e1798e62ac07" name="girepository-1_0" arch="x86_64">
  <version epoch="0" ver="1.62.0" rel="2.28"/>
  <changelog author="bjorn.lie@gmail.com" date="1550145600">- Update to version 1.59.4:
  + tests: Add functions using flat struct arrays.
  + Clean shebangs out of non-executable scripts and drop exec perm
    from xmlwriter.py.
  + maintransformer: parse deprecation annotations for section
    blocks.
  + repository: g_irepository_get_object_gtype_interfaces.
  + message: handle fatal errors even if warnings are disabled.
  + autotools: Fix build with ``-Wl,--as-needed``.
  + maintransformer: Don't warn on (optional) annotations on
    (inout).
  + girepository: Fix a possible use-after-free if
    g_mapped_file_new() fails and fix possible leak of transitive
    dependency names.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 1.59.5:
  + gir:
  - Include C header in cairo gir file.
  - Skip glib-enumtypes.h for GObject-2.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 1.60.0:
  + gir: Update glib annotations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554811200">- Update to version 1.60.1:
  + Update glib annotations.
  + shlibs: fall back to basename on macOS for relative paths.
  + meson: always pass --quiet to g-ir-scanner.
  + docs: include '--c-include' in g-ir-scanner man page.
  + tests: Fix compatibility with Python 3.5.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560600000">- Update to version 1.60.2:
  + docwriter: Fix Exception message attribute.
  + meson: fix default cairo DLL name on Windows.
  + scanner: Fix error on Windows in case source files are on
    different drives.
  + gi-test: Fix gir file tests with MSVC.
  + MSVC.README.rst: Update VS 2008/x64 build notes.
  + giscanner/scannerlexer.l: Include io.h on Windows.
  + build: Force-include msvc_recommended_pragmas.h on Visual
    Studio.
  + Update glib annotations.</changelog>
  <changelog author="qkzhu@suse.com" date="1565784000">- Update gi-find-deps.sh: upate javascript_requires function to parse
  the new JS import style (bsc#1140614).</changelog>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 1.61.2:
  + dumper: Use the distutils linker.
  + structinfo: Fix offset in find_method().
  + tests: Don't include "config.h" in installed files.
  + meson: Make meson.override_find_program working on more complex
    use cases.
- Changes from version 1.61.1:
  + Drop autotools build system.
  + meson: require 0.49.2.
  + Update glib annotations.
  + Add documentation to the RelaxNG schema.
  + Unused variable fixes.
  + cachestore: handle cache getting deleted while loading it.
  + Add Vulkan gir.
  + Make g_irepository_get_object_gtype_interfaces actually work.
  + gimarshallingtests: Add a marshalling test case for GPtrArrays
    and GArrays of structures.
  + scanner: parse and expose function macros.
  + meson: use pkg-config directly for libffi cflags and libs.
  + meson: Fix wrong dependency type check for gio-unix.
  + regress: Add regression test for signal with GError param.
- Add Vulkan to typelib template.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 1.62.0:
  + No changes since 1.61.2.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570881600">- Depend on the specific Python ABI version the module was built with,
  as the _giscanner binary module is ABI dependent. Fixes boo#1153837</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576238400">- Drop python3-Sphix BuildRequires, only used for rebuilding the
  website contents.</changelog>
</package>
<package pkgid="56f7ee5fd8feceeb31820c5c6f2f5eba581b17af84c9e0515dead181a083f05d" name="glib-networking" arch="x86_64">
  <version epoch="0" ver="2.62.4" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1556884800">- Update to version 2.60.2:
  + OpenSSL backend now defaults to system trust store.
  + Fix client auth failure error with GnuTLS 3.6.7 (bsc#1134795).
- Drop 0001-gnutls-Handle-new-GNUTLS_E_CERTIFICATE_REQUIRED.patch:
  fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560081600">- Update to version 2.60.3:
  + Fix clobbering of the thread-default main context after
    certificate verification failure during async handshakes since
    2.60.1.
  + Fix GTlsDatabase initialization failures in OpenSSL backend due
    to uninitialized memory use.
  + Fix minor leak of ALPN protocols.</changelog>
  <changelog author="kukuk@suse.de" date="1566993600">- Move LICENSE_EXCEPTION to %license.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 2.61.92:
  + Discard queued data after interrupted writes.
  + Verify socket timeouts are respected.
  + Fix a couple broken error messages.
  + Changes in version 2.61.90:
  + Fix translations of certain error messages
  + Changes in version 2.61.2:
  + Improve certain handshake error messages.
  + Fix regressions introduced in 2.61.1.
  + Changes in version 2.61.1:
  + This release contains a major refactoring of the TLS
    codebase. The GnuTLS backend now shares the same base classes
    as the OpenSSL backend, to avoid duplicating as much code as
    possible. The base classes, previously used only by the
    OpenSSL backend and originally forked from glib-networking
    several years ago, have been enhanced to achieve feature-parity
    with the current state of the GnuTLS backend.  Please note
    that the OpenSSL backend remains experimental. Further planned
    work is required before this backend will be production-ready.</changelog>
  <changelog author="mgorse@suse.com" date="1567857600">- Update to version 2.62.0:
  + Revert broken queued data fix for
    glgo#GNOME/glib-networking#15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570276800">- Update to version 2.62.1:
  + Fix two memory leaks.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Update to version 2.62.2:
  + Fix handshake_context crashes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 2.62.3:
  + Fix leak of base iostream (or base datagram socket), 2.62
    regression.
  + Fix duplicate notifies of peer-certificate and
    peer-certificate-errors.
  + Fix obscure corner case where SNI might not work.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="mgorse@suse.com" date="1591617600">- Update to version 2.62.4:
  - Fix CVE-2020-13645, fail connections when server identity is
    unset (boo#1172460).</changelog>
</package>
<package pkgid="52b122039789d865351930409ef34969869dd45bf33644ed1e0f606a49be16b1" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="c407414f98ca6bd80a4f3b66f836a3ed8f2c2a659d29d2aafd6cf8bffcd4b0d0" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.20.7"/>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
</package>
<package pkgid="2f63c24e6eb31777c3a04d3d273ea4307185effbda8162c56e08ff403ceb0a95" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.20.7"/>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
</package>
<package pkgid="a0a2825f53bbaaac4fe347dcdc97318ad30d38cea2b668b5bb8a2cc1f566db30" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.20.7"/>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
</package>
<package pkgid="c69d5f96f197fdcadd8c4250a296c26a17aaa20359969775cf4eb452db8b32fa" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.20.7"/>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
</package>
<package pkgid="fae1b5eb1d1c7b1d2d5f71ae9ee5c6f0424b4cd58e393aa64817d03cbf9b4bfe" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.16.1"/>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
  <changelog author="pmonreal@suse.com" date="1645444800">- Security fix: [bsc#1196167, CVE-2021-4209]
  * Null pointer dereference in MD_UPDATE
  * Add gnutls-CVE-2021-4209.patch</changelog>
</package>
<package pkgid="f793d90d9268890d0fc7790ffb52f8280a0229c8fb087ee161c9022c203743cb" name="google-opensans-fonts" arch="noarch">
  <version epoch="0" ver="1.0" rel="1.21"/>
  <changelog author="toms@opensuse.org" date="1328356800">- First public version (declared "1.0")</changelog>
  <changelog author="pgajdos@suse.com" date="1334836800">- Apache-2.0 license
- packaged LICENSE.txt</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
</package>
<package pkgid="624105a34342742280d98cddc021fbca48513106d1acea6b6eaf4d6948b802b0" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.27" rel="1.2"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
</package>
<package pkgid="9841285dd988868e2fb016cfcc1a019678cecd6c8a188130574ef53e6c02b824" name="gptfdisk" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="2.11"/>
  <changelog author="sweet_f_a@gmx.de" date="1358510400">- Update to new upstream release 0.8.6
  * add type codes for a Sony System Partition and for VMWare ESX
  * new check in the verification code
  * support for building under Solaris.
  * fix Mac OS X build
  * fix the hybrid MBR creation support that could cause it to omit
    the 0xEE partition under some circumstances
  * fix a bug that could cause a crash when passing a partition
    number of 0 via the -t option.</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- Update to new upstream release 0.8.7
  * Small improvements and bug fixes mark this revision.
  * Three new partition type codes have been added:
    freedesktop.org's proposed $BOOT partition (type code EA00),
    the Intel Rapid Start partition (code 8400),
    and for Haiku's BFS (code EB00).
  * Removed a stray debug message that appeared when reading MBR
    disks.
  * The "converting MBR to GPT" message has been modified to
    clarify that changes are being held in memory.
  * The Mac version now works on /dev/rdisk* devices as well as
    /dev/disk* devices.
  * When used with /dev/rdisk* devices, the partition table can
    sometimes be re-read without rebooting or unplugging and
    re-inserting the disk.
  * Finally, cgdisk now supports a -a option, which works similarly
    to the -a option in cfdisk.
- remove gptfdisk-0.8.5-fix-test-suite-short-opt-usage.patch, is
  upstream merged</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- Update to new upstream release 0.8.8
  * Fixed bug that could cause segfault when passing an invalid
    partition number to sgdisk's -i/--info command.
  * Added new partition type codes.
  * Added a pause (with a prompt to hit &lt;Enter&gt;) to display more
    items gdisk and cgdisk. There's no such pause/prompt in sgdisk,
    though.
  * Fine-tuned verification ('v') check for 0xEE partition that
    doesn't begin on sector 1.
  * Fixed hybrid MBR creation on disks larger than 2TiB
  * Added check for an active/bootable 0xEE protective partition to
    the verify ('v') function.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1393329600">- Update to new upstream release 0.8.9
  * Three new type codes.
  * The verify (v) function now checks for MBR partitions (the 0xEE
  protective partitions or hybrid MBR partitions) that don't fit
  on the disk.
  * The GPT-destruction options (z in gdisk, -z and -Z in sgdisk)
  now wipe out the final few sectors on the disk rather than
  wherever the backup GPT data are recorded as being. This is done
  to prevent wiping out data mid-disk, which can otherwise happen
  if a RAID array is resized in certain ways and the GPT data are
  not moved prior to wiping the GPT data.
  * The FixParts program had developed a bug in which it complained
  that the 0xEE partition didn't begin on sector 1; this version
  fixes that bug.
  * Finally, this version removes the dependency on libicu for UTF-16
  support in partition names.
- remove obsolete libicu dependency</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1393934400">- Update to new upstream release 0.8.10
  * Bug fix of previous version: The hybrid MBR creation code in
  gdisk would ignore the second and third partitions to be
  hybridized.
  * Fix bug that could cause incorrect partition end points to be
  set on hybridized partitions that spanned the 2^32-sector mark
  on disks.
  * Finally, this version enables the use of 0 as a value for a
  partition number to the -A/--attributes, -c/--change-name,
  - t/--typecode, and -u/--partition-guid commands if an earlier
  - n/--new option created a new partition; in this case, 0 refers
  to that newly-created partition.</changelog>
  <changelog author="jengelh@inai.de" date="1425816000">- Remove old RPM tags for pre-12.x openSUSE.
  Remove duplicated documentation.</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.0
  * Added partition type for Windows Storage Spaces, Ceph,
    and Discoverable Linux Partitions.
  * Added -O/--print-mbr option to sgdisk</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1445860800">- Update to new upstream release 1.0.1
  * new type codes
  * bug fixes
  * changes to the OS X build for OS X 10.11 ("El Capitan")</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="c0038ee00a8c25ca5bdb737553b0b9a36ce323bc0fd872a1ebf4e44463ccda8e" name="grep" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.3.12"/>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
</package>
<package pkgid="46ad36446354c769603990bbc5b86b95eb43c4f73814b12de207290be62ac332" name="growpart" arch="noarch">
  <version epoch="0" ver="0.31" rel="5.9.3"/>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ms@suse.com" date="1571313600">- Deleted rootgrow source and sub-package build
  rootgrow is provided on github: https://github.com/SUSE-Enceladus/rootgrow
  and builds a standalone package now</changelog>
  <changelog author="ms@suse.com" date="1571918400">- Reference entry for maintenance
  Tracker bug for the submission set to: bsc#1154357</changelog>
  <changelog author="iforster@suse.com" date="1572004800">- Replaced hardcoded systemd paths with macros in spec file</changelog>
  <changelog author="fvogt@suse.com" date="1572350400">- Clean growpart.spec:
  * Drop obsolete tags
  * Use install instead of mkdir+cp+chmod
  * Fix build on SLE 12 SP4</changelog>
  <changelog author="rjschwei@suse.com" date="1582804800">- Update to version 0.31 (bsc#1164736)
  + mount-image-callback: mount with -o 'rw' or -o 'ro' (LP: #1663722)
  + mount-image-callback: run blockdev and udevadm settle on nbd devices.
    (LP: #1741096, 1741300)
  + mount-image-callback: Drop support for mounting lxd containers.
    (LP: #1715994)
  + growpart: fix bug that stopped GPT disks from being grown past 2TB.
    (LP: #1762748)
  + mount-image-callback: mention --help and -C/--cd-mountpoint in Usage
  + growpart: fix bug when resizing a middle partition with sgdisk
    (LP: #1706751) [Fred De Backer]
  + growpart: Resolve symbolic links before operating.
    [Kevin Locke] (LP: #1744406)
  + growpart: fix bug occurring if start sector and size were the same.
    [Lars Kellogg-Stedman] (LP: #1807171)
  + debian/control: drop Suggests on lxc1
  + debian/tests/control: add test growpart-start-matches-size.
  + White space cleanup.  Remove trailing space and tabs.
  + Move to git.</changelog>
</package>
<package pkgid="199394a0f7b514c0287e39be7eb73a9e64fb50d4e2dc001ca86e5daef23894e8" name="growpart-generator" arch="noarch">
  <version epoch="0" ver="0.8" rel="150300.5.1"/>
  <changelog author="fvogt@suse.com" date="1573214400">- Initial packaging of the standalone generator</changelog>
  <changelog author="fvogt@suse.com" date="1573473600">- Use %{_systemdgeneratordir} macro</changelog>
  <changelog author="fvogt@suse.com" date="1645012800">- Get the parent device with lsblk
- Improve the partition number extraction to work with device names
  containing multiple numbers (bsc#1196101)</changelog>
</package>
<package pkgid="138b9438d3b55d52b9890593c4581cae33722b12d03fd814f817616c9562bd0d" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.04" rel="150300.22.12.2"/>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch</changelog>
  <changelog author="mchang@suse.com" date="1618833600">- Fix build error on armv6/armv7 (bsc#1184712)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1619179200">- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149)
  * grub2-once.service</changelog>
  <changelog author="mchang@suse.com" date="1624276800">- Fix boot failure after kdump due to the content of grub.cfg is not
  completed with pending modificaton in xfs journal (bsc#1186975)
  * grub-install-force-journal-draining-to-ensure-data-i.patch
- Patch refreshed
  * grub2-mkconfig-default-entry-correction.patch</changelog>
  <changelog author="mchang@suse.com" date="1624449600">- Fix error gfxterm isn't found with multiple terminals (bsc#1187565)
  * grub2-fix-error-terminal-gfxterm-isn-t-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1624881600">- Fix error not a btrfs filesystem on s390x (bsc#1187645)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1637928000">- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-grub-install-Fix-inverted-test-for-NLS-enabled-when-.patch
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch</changelog>
  <changelog author="mchang@suse.com" date="1640260800">- Add support for simplefb (boo#1193532).
  * grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112000">- Improve support for SLE Micro 5.1 on s390x.  (bsc#1190395)
  * grub2-s390x-04-grub2-install.patch
- Patch refreshed
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112001">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
</package>
<package pkgid="5d50ec8407e77b6b8a18fe382341d35f2fd348d436ddd7a64df27c9c9b5385c8" name="grub2-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="15.3.20210112" rel="lp153.1.26"/>
  <changelog author="lnussel@suse.de" date="1518696000">- Fix uninitialized $gfx_mode</changelog>
  <changelog author="lnussel@suse.de" date="1519819200">- update grub, gfxboot, xfce and yast themes (boo#1077654)</changelog>
  <changelog author="hellcp@opensuse.org" date="1521288000">- new icewm theme and fix for text entry in installer (boo#1084816)</changelog>
  <changelog author="hellcp@mailbox.org" date="1522756800">- Fix to boo#1087547, yast installation visibility</changelog>
  <changelog author="hellcp@mailbox.org" date="1524571200">- Added 5K wallpaper</changelog>
  <changelog author="hellcp@mailbox.org" date="1535112000">- Add fixes to role screen from Tumbleweed
- 15.1</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1551960000">- Add systemd logo icons
- Add LibreOffice branding
- optipng everything
- Base installer off of SVG</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563192000">- Bump to 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1580731200">- Sync with Tumbleweed</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1610452800">- Sync with Tumbleweed
- Bump to 15.3</changelog>
</package>
<package pkgid="ced74256e1e866c95e716b1d11c3d14069c352584ea711bf284c0c2eb6f2e394" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.04" rel="150300.22.12.2"/>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch</changelog>
  <changelog author="mchang@suse.com" date="1618833600">- Fix build error on armv6/armv7 (bsc#1184712)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1619179200">- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149)
  * grub2-once.service</changelog>
  <changelog author="mchang@suse.com" date="1624276800">- Fix boot failure after kdump due to the content of grub.cfg is not
  completed with pending modificaton in xfs journal (bsc#1186975)
  * grub-install-force-journal-draining-to-ensure-data-i.patch
- Patch refreshed
  * grub2-mkconfig-default-entry-correction.patch</changelog>
  <changelog author="mchang@suse.com" date="1624449600">- Fix error gfxterm isn't found with multiple terminals (bsc#1187565)
  * grub2-fix-error-terminal-gfxterm-isn-t-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1624881600">- Fix error not a btrfs filesystem on s390x (bsc#1187645)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1637928000">- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-grub-install-Fix-inverted-test-for-NLS-enabled-when-.patch
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch</changelog>
  <changelog author="mchang@suse.com" date="1640260800">- Add support for simplefb (boo#1193532).
  * grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112000">- Improve support for SLE Micro 5.1 on s390x.  (bsc#1190395)
  * grub2-s390x-04-grub2-install.patch
- Patch refreshed
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112001">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
</package>
<package pkgid="a5ff347cc9dc810fca3b2ab6e4d69c28956821025b6a4e9dfeb5104ac191cc50" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.04" rel="150300.22.12.2"/>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch</changelog>
  <changelog author="mchang@suse.com" date="1618833600">- Fix build error on armv6/armv7 (bsc#1184712)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1619179200">- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149)
  * grub2-once.service</changelog>
  <changelog author="mchang@suse.com" date="1624276800">- Fix boot failure after kdump due to the content of grub.cfg is not
  completed with pending modificaton in xfs journal (bsc#1186975)
  * grub-install-force-journal-draining-to-ensure-data-i.patch
- Patch refreshed
  * grub2-mkconfig-default-entry-correction.patch</changelog>
  <changelog author="mchang@suse.com" date="1624449600">- Fix error gfxterm isn't found with multiple terminals (bsc#1187565)
  * grub2-fix-error-terminal-gfxterm-isn-t-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1624881600">- Fix error not a btrfs filesystem on s390x (bsc#1187645)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1637928000">- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-grub-install-Fix-inverted-test-for-NLS-enabled-when-.patch
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch</changelog>
  <changelog author="mchang@suse.com" date="1640260800">- Add support for simplefb (boo#1193532).
  * grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112000">- Improve support for SLE Micro 5.1 on s390x.  (bsc#1190395)
  * grub2-s390x-04-grub2-install.patch
- Patch refreshed
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112001">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
</package>
<package pkgid="417696ef245374c574ecfa21fd09fd60da724611c24d70a58482f1c0c75b6047" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="150300.22.12.2"/>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch</changelog>
  <changelog author="mchang@suse.com" date="1618833600">- Fix build error on armv6/armv7 (bsc#1184712)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1619179200">- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149)
  * grub2-once.service</changelog>
  <changelog author="mchang@suse.com" date="1624276800">- Fix boot failure after kdump due to the content of grub.cfg is not
  completed with pending modificaton in xfs journal (bsc#1186975)
  * grub-install-force-journal-draining-to-ensure-data-i.patch
- Patch refreshed
  * grub2-mkconfig-default-entry-correction.patch</changelog>
  <changelog author="mchang@suse.com" date="1624449600">- Fix error gfxterm isn't found with multiple terminals (bsc#1187565)
  * grub2-fix-error-terminal-gfxterm-isn-t-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1624881600">- Fix error not a btrfs filesystem on s390x (bsc#1187645)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1637928000">- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-grub-install-Fix-inverted-test-for-NLS-enabled-when-.patch
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch</changelog>
  <changelog author="mchang@suse.com" date="1640260800">- Add support for simplefb (boo#1193532).
  * grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112000">- Improve support for SLE Micro 5.1 on s390x.  (bsc#1190395)
  * grub2-s390x-04-grub2-install.patch
- Patch refreshed
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112001">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
</package>
<package pkgid="d033c983f9a6fe449ed404594f9e0cd1287d39f0d054470cfc3463f98d38af6a" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.04" rel="150300.22.12.2"/>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch</changelog>
  <changelog author="mchang@suse.com" date="1618833600">- Fix build error on armv6/armv7 (bsc#1184712)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1619179200">- Fix obsolete syslog in systemd unit file and updating to use journal as
  StandardOutput (bsc#1185149)
  * grub2-once.service</changelog>
  <changelog author="mchang@suse.com" date="1624276800">- Fix boot failure after kdump due to the content of grub.cfg is not
  completed with pending modificaton in xfs journal (bsc#1186975)
  * grub-install-force-journal-draining-to-ensure-data-i.patch
- Patch refreshed
  * grub2-mkconfig-default-entry-correction.patch</changelog>
  <changelog author="mchang@suse.com" date="1624449600">- Fix error gfxterm isn't found with multiple terminals (bsc#1187565)
  * grub2-fix-error-terminal-gfxterm-isn-t-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1624881600">- Fix error not a btrfs filesystem on s390x (bsc#1187645)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1637928000">- Fix error lvmid disk cannot be found after second disk added to the root
  volume group (bsc#1189874) (bsc#1071559)
  * 0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch
- Fix error /boot/grub2/locale/POSIX.gmo not found (bsc#1189769)
  * 0001-grub-install-Fix-inverted-test-for-NLS-enabled-when-.patch
  * 0001-Filter-out-POSIX-locale-for-translation.patch
- Fix unknown TPM error on buggy uefi firmware (bsc#1191504)
  * 0001-tpm-Pass-unknown-error-as-non-fatal-but-debug-print-.patch
- Fix arm64 kernel image not aligned on 64k boundary (bsc#1192522)
  * 0001-arm64-Fix-EFI-loader-kernel-image-allocation.patch
  * 0002-Arm-check-for-the-PE-magic-for-the-compiled-arch.patch</changelog>
  <changelog author="mchang@suse.com" date="1640260800">- Add support for simplefb (boo#1193532).
  * grub2-simplefb.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112000">- Improve support for SLE Micro 5.1 on s390x.  (bsc#1190395)
  * grub2-s390x-04-grub2-install.patch
- Patch refreshed
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1643112001">- Fix wrong default entry when booting snapshot (bsc#1159205)
  * grub2-btrfs-08-workaround-snapshot-menu-default-entry.patch</changelog>
</package>
<package pkgid="477511a41d3aac81e0be2893f60e20b13c0e0fd37cc543c6b4deabcf065fc0e8" name="gsettings-desktop-schemas" arch="x86_64">
  <version epoch="0" ver="3.34.0" rel="3.4"/>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 3.31.91:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551873600">- Update to version 3.31.92:
  + Drop legacy build systems.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552392000">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1553169600">- Rebase gsettings-desktop-schemas-fate324570-Add-key-for-GDM-background-configuration.patch
  (bsc#1120178)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553256000">- Add adobe-sourcecodepro-fonts Recommends: New default font for
  monospace was added for version 3.32.x.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.90:
  + Add 'middle-click-emulation' setting.
  + Updated translations.
- Changes from version 3.33.1:
  + Add 'enable-hot-corners' setting.
  + Updated translations.
- Changes from version 3.33.0:
  + Add mount-removable-storage-devices-as-read-only lockdown
    option.
  + Add setting for overlay scrolling.
  + Add locate-pointer setting.
  + Add settings to store numlock state.
  + Updated translations.
- Require meson &gt;= 0.50.0.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Translation updates.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Translation updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="alynx.zhou@suse.com" date="1590148800">- Add 00_org.gnome.desktop.peripherals.gschema.override: in
  SLE-15-SP2 and Leap 15.2, revert touchpad click method default
  value via gsettings vendor overrides, in order to be consistent
  with earlier service pack (bsc#1171593).</changelog>
</package>
<package pkgid="6ba4e77d427fe604c76ad6811431195090d345e79ded96e59dd6ebc7c8d96096" name="gstreamer" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0800d29a3b2ecc86e81bb7f76ef7554aa3067d108750b413a98ac7a3d13ce205" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="30c6546234f6c0a3d7cb73bc348146f63f994c8d98a5da7b1b2641558fcfcb36" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.24.20" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
  <changelog author="fcrozat@suse.com" date="1623931200">- Add gtk3-fix-avahi-printers.patch: Ensure printers entries from
  Avahi are usable (bsc#1094486, bsc#1189238).</changelog>
</package>
<package pkgid="7cb841be8645c8341b5b171cbcd1aed15fa4df88daeb6cdd0ef44a22daded263" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.24.20" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
  <changelog author="fcrozat@suse.com" date="1623931200">- Add gtk3-fix-avahi-printers.patch: Ensure printers entries from
  Avahi are usable (bsc#1094486, bsc#1189238).</changelog>
</package>
<package pkgid="6c5ce791832ab5d5d82a12064618889f9258ac1aa9ddd39b6b1608e288d88e38" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
  <changelog author="fcrozat@suse.com" date="1623931200">- Add gtk3-fix-avahi-printers.patch: Ensure printers entries from
  Avahi are usable (bsc#1094486, bsc#1189238).</changelog>
</package>
<package pkgid="427fe0f34113f621c0c33fd35173a80fe32671a60935325ebda6cfbedbe0db5e" name="guestfs-data" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="13.73"/>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="ldewey@suse.com" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="ldewey@suse.com" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1566475200">- Remove empty /etc/libguestfs-tools.conf</changelog>
  <changelog author="gmoro@suse.com" date="1566993600">- Add sysconfig-netconfig to appliance (boo#1136878)
  Patches added:
    netconfig.patch</changelog>
  <changelog author="ldewey@suse.com" date="1568030400">- Added lvm2 to Requires for using virt-resize of xfs images.
  (bsc#1138860)</changelog>
  <changelog author="christophe@krop.fr" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="carnold@suse.com" date="1584619200">- bsc#1167131 - virt-v2v fails importing ubuntu 18.04 LTS ova
  500acb15-v2v-linux-fix-kernel-detection-when-split-in-different-packages.patch</changelog>
  <changelog author="carnold@suse.com" date="1604577600">- bsc#1178495 - Leap Gap: Libguestfs.spec contains the is_opensuse
  macro
  libguestfs.spec</changelog>
</package>
<package pkgid="f2d1c6b0f4676519e84caa1e9a2853b1e985c82872c14e1a76a54706dac7bf03" name="guestfs-tools" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="13.73"/>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="ldewey@suse.com" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="ldewey@suse.com" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1566475200">- Remove empty /etc/libguestfs-tools.conf</changelog>
  <changelog author="gmoro@suse.com" date="1566993600">- Add sysconfig-netconfig to appliance (boo#1136878)
  Patches added:
    netconfig.patch</changelog>
  <changelog author="ldewey@suse.com" date="1568030400">- Added lvm2 to Requires for using virt-resize of xfs images.
  (bsc#1138860)</changelog>
  <changelog author="christophe@krop.fr" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="carnold@suse.com" date="1584619200">- bsc#1167131 - virt-v2v fails importing ubuntu 18.04 LTS ova
  500acb15-v2v-linux-fix-kernel-detection-when-split-in-different-packages.patch</changelog>
  <changelog author="carnold@suse.com" date="1604577600">- bsc#1178495 - Leap Gap: Libguestfs.spec contains the is_opensuse
  macro
  libguestfs.spec</changelog>
</package>
<package pkgid="3982e1ed00a10a3aa7d0ee02a7bbf8c075cf831f7f2049a6336d8f48c1a52077" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="f24d4a27c8d98109b6d34c9be01e8dc7b284ec4c081fd4fdfd1725cbac39096a" name="haveged" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="6.1"/>
  <changelog author="meissner@suse.com" date="1424174400">- haveged-dracut.module: include haveged into the initrd for
  randomness generation. bsc#898669
- haveged.service: adjust so it is started before journald
  and also make sure it is shutdown quite late. bsc#898669
- regenerate initrd on installation. bsc#898669</changelog>
  <changelog author="dmueller@suse.com" date="1443528000">- add fix-enforced-clock-gettime.patch to fix build on generic
  platforms like e.g. aarch64, which is only needed due to
  our (non-recommended choice) of using gettime (fate#318370)</changelog>
  <changelog author="meissner@suse.com" date="1443614400">- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669</changelog>
  <changelog author="meissner@suse.com" date="1444392000">- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs</changelog>
</package>
<package pkgid="97fe4f138c0527e1c4155869ff4dde26671848d40f97c38c3da6a8bd18e6a853" name="hdparm" arch="x86_64">
  <version epoch="0" ver="9.52" rel="1.22"/>
  <changelog author="puzel@suse.com" date="1353067200">- update to hdparm-9.43
  - rearrange flag execution so that the idle/standby/sleep "now"
    flags are executed last.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add pkgconfig(udev) BuildRequires: needed in order to dynamically
  extract the right folder for udev rules and scripts.
- Copy the udev rules to %{_udevdir}, identified based on udev.pc.
- Add pkgconfig BuildRequires: needed, as we otherwise end up not
  having pkg-config in the build root, which we rely on to read
  the .pc file.</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; the package doesn't contain any init
  script</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1411128000">- Fix udev rules, broken script location, scriptlets
  macro usages..</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix bashisms in ultrabayd and udev.idedma.sh scripts
- add patches:
  * hdparm-9.43-fix-bashisms.patch</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Use preferred download URL; replace only rpm shell vars with
  macros to go in line with the rest.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Update to version 9.45
  * fixed blocksize handling in fibmap code to use result from
    FIGETBSZ in more places
  * fixed divide by zero exception in geom.c
  * tidying up formatting in sgio.c</changelog>
  <changelog author="kstreitova@suse.com" date="1434974400">- update to version 9.48
  * 9.48 - fixed a number of output bugs due to the devslp patch
  * 9.47 - added devslp patch (IDENTIFY word 76) from David Woodhouse.
  - help and manpage fixes from Michal Minar.
  * 9.46 - fix compilation with "musl libc".
  - added "hex:aabbcc.." for binary security passwords.
  - return EIO when read_big_block() fails
  - use llabs() rather than abs() in identify.c
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1470312000">- remove 56-idedma.rules and idedma.sh as none of these scripts
  have any function whatsoever. They rely on the obsolete IDE
  drivers [bsc#991898]
- remove /etc/sysconfig/ide file [bsc#922659]</changelog>
  <changelog author="kstreitova@suse.com" date="1513166400">- update to version 9.52
  * 9.52 - add support for Jmicron USB-SATA bridges
  * 9.51 - New --security-prompt-for-password flag for use with the
    various --security- actions
  - Makefile tweak
  - fix spelling/typos in man page and "removable"
  - fix spelling/typos in --sanitize-crypto-scramble
  - fix NULL password handling in --security-unlock
  * 9.50 - minor fixes for sanitize device stuff
  * 9.49 - add ACS-3 overprovisioning support
  - fix bug in display of security section and use updated
    erase-time values from ACS-3
  - increase timeout on fwdownload to 2 minutes
  - fix bugs from devslp patch
- run spec-cleaner</changelog>
</package>
<package pkgid="8e66e6bd372a776f0248e79b1446852abfad07ef4812436a746220c48c2ded2e" name="health-checker" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="1.18"/>
  <changelog author="kukuk@suse.de" date="1527076800">- Update to version 1.0
  * Skip health checker if emergency shell started by user
  * Add GRUB2 fallback handling
  * Adapt to new unified /var directory.
  * Get basic version of rollback from initrd working</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Use noun phrase in summary.</changelog>
  <changelog author="kukuk@suse.de" date="1545220800">- Split the CaaSP plugin into a MicroOS and CaaSP part</changelog>
  <changelog author="kukuk@suse.de" date="1549281600">- Update to version 1.1
  * new plugins for crio and kubelet
- Add new sub-package with test cases for openSUSE Kubic</changelog>
  <changelog author="kukuk@suse.de" date="1551268800">- Update to version 1.2
  * Add hooks to send telemetrics events</changelog>
  <changelog author="kukuk@suse.de" date="1552564800">- Update to version 1.2.1
  * Make sure telmetrics payload is not empty in success case</changelog>
  <changelog author="kukuk@suse.de" date="1553083200">- Update to version 1.2.2
  * Fix product namings</changelog>
  <changelog author="kukuk@suse.de" date="1557144000">- Update to version 1.2.3
  * Fix crio RPM name</changelog>
  <changelog author="iforster@suse.com" date="1576497600">- Update to version 1.3
  * Support /var on non-root device for reading health data
  * Avoid GRUB error message if env_block is not set [boo#1151072]
  * Don't show message on manual emergency shell invocation
  * Fix handling when booting a non-default snapshot</changelog>
  <changelog author="iforster@suse.com" date="1580385600">- Update to version 1.3.1
  * Support multiple menuentries in GRUB configuration
    [gh#kubic-project/health-checker#5]</changelog>
</package>
<package pkgid="6108a1f755fd5cd88edd5118c405af3f048b69b7c5d6a5251ea08e5f60a3a93e" name="health-checker-plugins-MicroOS" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="1.18"/>
  <changelog author="kukuk@suse.de" date="1527076800">- Update to version 1.0
  * Skip health checker if emergency shell started by user
  * Add GRUB2 fallback handling
  * Adapt to new unified /var directory.
  * Get basic version of rollback from initrd working</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Use noun phrase in summary.</changelog>
  <changelog author="kukuk@suse.de" date="1545220800">- Split the CaaSP plugin into a MicroOS and CaaSP part</changelog>
  <changelog author="kukuk@suse.de" date="1549281600">- Update to version 1.1
  * new plugins for crio and kubelet
- Add new sub-package with test cases for openSUSE Kubic</changelog>
  <changelog author="kukuk@suse.de" date="1551268800">- Update to version 1.2
  * Add hooks to send telemetrics events</changelog>
  <changelog author="kukuk@suse.de" date="1552564800">- Update to version 1.2.1
  * Make sure telmetrics payload is not empty in success case</changelog>
  <changelog author="kukuk@suse.de" date="1553083200">- Update to version 1.2.2
  * Fix product namings</changelog>
  <changelog author="kukuk@suse.de" date="1557144000">- Update to version 1.2.3
  * Fix crio RPM name</changelog>
  <changelog author="iforster@suse.com" date="1576497600">- Update to version 1.3
  * Support /var on non-root device for reading health data
  * Avoid GRUB error message if env_block is not set [boo#1151072]
  * Don't show message on manual emergency shell invocation
  * Fix handling when booting a non-default snapshot</changelog>
  <changelog author="iforster@suse.com" date="1580385600">- Update to version 1.3.1
  * Support multiple menuentries in GRUB configuration
    [gh#kubic-project/health-checker#5]</changelog>
</package>
<package pkgid="2beab298c8512dced96230137b92fcb5ef519e33351864f420540117fcae9533" name="hicolor-icon-theme" arch="noarch">
  <version epoch="0" ver="0.17" rel="1.21"/>
  <changelog author="vuntz@opensuse.org" date="1294401600">- Update macros.hicolor after upstream GTK+ decided to use the same
  name for the gtk-update-icon-cache tool in both gtk2 and gtk3: we
  use alternatives to handle the two versions of the tools. This
  means we can always assume that the tool name is
  gtk-update-icon-cache; so no need to check for
  gtk-update-icon-cache-3.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1362139200">- Spec-cleanup using format_spec_file service.</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dimstar@opensuse.org" date="1387886400">- Update to version 0.13:
  + Icon-theme-spec: Add icon scale support.
  + Support 512x512 bitmaps for high density display age.
- Rebase hicolor-scalable-sizes.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1418731200">- Update to version 0.14:
  + Use automake to generate VPATH-compatible makefiles.</changelog>
  <changelog author="zaitor@opensuse.org" date="1427198400">- Update to version 0.15:
  + Add symbolic/apps directory for symbolic app icons.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445860800">- Drop hicolor-scalable-sizes.patch: It breaks builder icons, and
  default icons on desktops like MATE. It has never been taken
  upstream, nor is any other distro using it, so lets align with
  everyone else.</changelog>
  <changelog author="tchvatal@suse.com" date="1464264000">- Update url to point to some existing location.
- Run over with spec-cleaner: Update macros and remove obsolete
  clean section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498564800">- Migrate %icon_theme_cache_post/postun macro from
  hicolor-icon-theme to gtk2-tools and gtk3-tools file triggers.
  The macros are defined to be nop, in order to not break all spec
  files for now.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504785600">- Update to version 0.17:
  + Fix 256x256@2/animations name in index.theme.
- Changes from version 0.16:
  + Add hidpi icon directories (e.g. 48x48@2) with scale=2.</changelog>
</package>
<package pkgid="8610482d8d0ce1c2e26c95a30b8037b442bae939ed5a6149011ae159ef94bf10" name="hostname" arch="x86_64">
  <version epoch="0" ver="3.16" rel="2.22"/>
  <changelog author="gber@opensuse.org" date="1433937600">- initial packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1434024000">- BuildIgnore hostname (ourselves): net-tools has a dependency on
  hostname, and net-tools is part of the VMInstall package set. As
  we know we do not rely on our own code to build, we can safely
  ignore hostname and break that nasty buildcycle.</changelog>
  <changelog author="nemysis@openSUSE.org" date="1441713600">- Update to 3.16, announce message:
  * Changed buffer size to the recommended 255 character when working with
    names instead of IPs. (Closes: #796922)
  * Bumped Standards-Version to 3.9.6, no changes needed.
- Use %{name} instead of hostname
- Use CFLAGS="%{optflags}" to fix 'File is compiled without RPM_OPT_FLAGS'
- Add changelog to Documentation</changelog>
  <changelog author="kukuk@suse.de" date="1459425600">- Add ypdomainname and nisdomainname, too. Were removed from yp-tools.</changelog>
  <changelog author="kukuk@suse.de" date="1502798400">- Add build require libnsl-devel in preparation of libnsl removal
  from glibc.</changelog>
</package>
<package pkgid="41233edb6e9a63647fb56aef7dd172a5b5709e188c5874de513f46996cd4013f" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.355" rel="3.39.1"/>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1622635200">- Update to version 0.348 (bsc#1186749):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1625745600">- Update to version 0.349 (bsc#1187948):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1627992000">- Update to version 0.350 (bsc#1189005):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1630584000">- Update to version 0.351 (bsc#1190091):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="04859ac49211d986035ca90810e2ac7dee8c402a5e34d17e2a447be925bdd2db" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.72" rel="1.12"/>
  <changelog author="wfeldt@opensuse.org" date="1558612800">- merge gh#openSUSE/hwinfo#79
- return BIOS UUID in decoded (with '-'s) form (bsc#1135819)
- 21.65</changelog>
  <changelog author="wfeldt@opensuse.org" date="1558612801">- merge gh#openSUSE/hwinfo#80
- fix Makefile and allow building for old distros
- 21.66</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563537600">- merge gh#openSUSE/hwinfo#81
- fix DASD detection (bsc#1136475)
- don't include bcache devices
- 21.67</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
</package>
<package pkgid="9459d44246d1cb500d29e6fef483b814ceabaaab86839ce76bd2c9b6558e02b1" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="8" rel="14.6.1"/>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="760eb72337ed924797bf1b505325dfaf0e289ba9b30d082b1c1c18f2c4036504" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="150300.4.5"/>
  <changelog author="iforster@suse.com" date="1600430400">- Retrigger udev when requesting networking on demand</changelog>
  <changelog author="iforster@suse.de" date="1603108800">- Update to version 2.7.0:
  * news: add notes for 2.7.0
  * docs: stabilize spec
  * gomod: bump go.opencensus.io to v0.22.5
  * docs: add section to spec stabilization for failing external tests
  * news: fix error in 2.3.0 changelog
  * tests: update for spec stabilization
  * internal: update for new experimental spec
  * config/v3_3_experimental: create new experimental package
  * config/v3_2_experimental: mark stable
  * interal/providers/*stack: drop timeout for config fetch
  * internal/providers/*stack: exit early if all configs error out
  * internal/providers/*stack: make ErrNotFound authoritative
  * doc: add clevis custom documentation
  * internal/exec/stages: add clevis custom support
  * config: add custom options for clevis devices
  * fetch-offline: immediately return ErrNeedNet on OpenStack
  * ci: unfreeze kernel
  * tests/*: add test for resizing an existing partition
  * docs/*: add resize partition info
  * stages/disks: support resizing an existing partition
  * config: add resize to schema
  * README: Minor changes for consistency
  * test: Use alternative marker for testing ignition config examples
  * docs: Convert and improve formatting for INI sections
  * docs: Add spec ordering instructions for new stable releases
  * docs: Add ToC for some long pages
  * docs: Rename Migrating ... to Upgrading Configs
  * docs: Fix link in Development page
  * docs: Add specs reference page
  * docs: Add index page inspired from README
  * docs: Add Config Validation example from README
  * docs: Add Jekyll front matter for existing pages
  * docs: Add Jekyll and theme config
  * internal: fix S3 region detection
  * docs: Follow-up for doc-&gt;docs renaming
  * docs: Rename doc to docs for GitHub Pages support
  * docs/getting-started: tiny cleanups
  * README: drop stray link target
  * doc: drop references to Container Linux
  * doc/development: drop section on running blackbox tests on CL
  * doc: add gs url scheme for bare metal platform
  * fetch: don't run if fetch-offline fetched a config
  * doc: fix LUKS indentation for configuration-v3_2_experimental docs
  * doc: Add shouldExist for users and groups
  * engine: fix logging interactions with fetch-offline
  * AzureStack: fix unfortunate typo of iso9660
  * *: add wipeVolume LUKS field
  * types: Use "path" instead of "path/filepath"
  * Add support for building 32 bit ARM version
  * Install Dracut modules with correct permissions
  * Add support for building 32 bit x86 version
  * doc: add LUKS examples &amp; operator notes
  * internal/stages/disks: allow LUKS device re-use
  * internal: use device aliases for LUKS
  * tests: fix partition.number0 partition size specification
  * blkid: drop some unsafe pointer casts
  * blkid: fix invalid pointer cast in DumpDisk()
  * {sgdisk,blkid}: use int64 for sector counts
  * sgdisk: stop putting sector counts in MiB fields
  * README: note that spec2x is unmaintained
  * release-checklist: drop support for Ignition 0.x
  * release-checklist: minor updates
- Remove upstreamed patches
  * 0001-fix-install-permissions.patch
  * 0003-fix-i386-build.patch
  * ignition-fix-arm32-installation.patch
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="hello@anthonyrabbito.com" date="1617192000">- Update to version 2.9.0:
  * news: add notes for 2.9.0
  * internal/providers: Run platform Init function before fetching config
  * internal/providers/aws: fix panic when an IMDSv2 token is present
  * internal/resource/http: re-order initial backoff ramping
  * internal/providers/util: drop dead code
  * ci: move Travis jobs to GitHub actions
  * *: fix errcheck warnings
  * internal/log: drop the error return to appease golanci-lint
  * internal/providers/packet: fix ineffassign warning
  * internal/exec/stages/files: fix the EntrySort test
  * internal: support IMDSv2 for AWS metadata service
  * config/*: require filesystems.format with wipeFilesystem or mountOptions
  * docs: make storage.filesystems.path field optional
  * aws: Log if we fail to determine the EC2 region
  * docs: move systemd.units.name uniqueness constraint to units
  * *: fix gosimple warnings
  * *: fix deadcode warnings
  * *: fix staticcheck warnings
  * config/*: fix nil deref on partitions with no number or label
  * config: add specs newer than 3.0 to TestConfigStructure
  * news: add notes for 2.8.1
  * config/merge: support struct pointers
  * test: drop stale comment
  * tests: Remove unused checkOnStrings
  * news: add notes for 2.8.0
  * config: deprecate MergeStruct()
  * config/merge: allow obtaining a transcript of merge operations
  * config/merge: access field name as fieldMeta.Name
  * config/merge: test primitive list items in slice case 1
  * config/merge: fix typo
  * config/merge: fix comments and add a couple more
  * config/util: remove stray print when parsing invalid JSON
  * vendor: update vcontext
  * docs/development: update dep list for blackbox tests
  * tests/positive: Add tests for masking and unmasking units
  * units: add support for unmasking systemd units
  * release-checklist: minor updates to the release instructions
  * tests/positive/general: add test for merging multiple base configs
  * tests/positive/general: update base config reference
  * docs/development: update spec stabilization to avoid CI breakage
  * release-checklist: drop download_ignition.sh
  * providers/system: support .d directory for base config fragments
  * docs/migrating-configs: spell out Google Cloud Storage
  * release-checklist: update packaging section</changelog>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
</package>
<package pkgid="bb7ec65ad3844d8b8cb1a29dd691bbb01d82a3afba837d0fc5ea77d7d5b2805a" name="ignition-dracut-grub2" arch="x86_64">
  <version epoch="0" ver="2.11.0" rel="150300.4.5"/>
  <changelog author="iforster@suse.com" date="1600430400">- Retrigger udev when requesting networking on demand</changelog>
  <changelog author="iforster@suse.de" date="1603108800">- Update to version 2.7.0:
  * news: add notes for 2.7.0
  * docs: stabilize spec
  * gomod: bump go.opencensus.io to v0.22.5
  * docs: add section to spec stabilization for failing external tests
  * news: fix error in 2.3.0 changelog
  * tests: update for spec stabilization
  * internal: update for new experimental spec
  * config/v3_3_experimental: create new experimental package
  * config/v3_2_experimental: mark stable
  * interal/providers/*stack: drop timeout for config fetch
  * internal/providers/*stack: exit early if all configs error out
  * internal/providers/*stack: make ErrNotFound authoritative
  * doc: add clevis custom documentation
  * internal/exec/stages: add clevis custom support
  * config: add custom options for clevis devices
  * fetch-offline: immediately return ErrNeedNet on OpenStack
  * ci: unfreeze kernel
  * tests/*: add test for resizing an existing partition
  * docs/*: add resize partition info
  * stages/disks: support resizing an existing partition
  * config: add resize to schema
  * README: Minor changes for consistency
  * test: Use alternative marker for testing ignition config examples
  * docs: Convert and improve formatting for INI sections
  * docs: Add spec ordering instructions for new stable releases
  * docs: Add ToC for some long pages
  * docs: Rename Migrating ... to Upgrading Configs
  * docs: Fix link in Development page
  * docs: Add specs reference page
  * docs: Add index page inspired from README
  * docs: Add Config Validation example from README
  * docs: Add Jekyll front matter for existing pages
  * docs: Add Jekyll and theme config
  * internal: fix S3 region detection
  * docs: Follow-up for doc-&gt;docs renaming
  * docs: Rename doc to docs for GitHub Pages support
  * docs/getting-started: tiny cleanups
  * README: drop stray link target
  * doc: drop references to Container Linux
  * doc/development: drop section on running blackbox tests on CL
  * doc: add gs url scheme for bare metal platform
  * fetch: don't run if fetch-offline fetched a config
  * doc: fix LUKS indentation for configuration-v3_2_experimental docs
  * doc: Add shouldExist for users and groups
  * engine: fix logging interactions with fetch-offline
  * AzureStack: fix unfortunate typo of iso9660
  * *: add wipeVolume LUKS field
  * types: Use "path" instead of "path/filepath"
  * Add support for building 32 bit ARM version
  * Install Dracut modules with correct permissions
  * Add support for building 32 bit x86 version
  * doc: add LUKS examples &amp; operator notes
  * internal/stages/disks: allow LUKS device re-use
  * internal: use device aliases for LUKS
  * tests: fix partition.number0 partition size specification
  * blkid: drop some unsafe pointer casts
  * blkid: fix invalid pointer cast in DumpDisk()
  * {sgdisk,blkid}: use int64 for sector counts
  * sgdisk: stop putting sector counts in MiB fields
  * README: note that spec2x is unmaintained
  * release-checklist: drop support for Ignition 0.x
  * release-checklist: minor updates
- Remove upstreamed patches
  * 0001-fix-install-permissions.patch
  * 0003-fix-i386-build.patch
  * ignition-fix-arm32-installation.patch
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="hello@anthonyrabbito.com" date="1617192000">- Update to version 2.9.0:
  * news: add notes for 2.9.0
  * internal/providers: Run platform Init function before fetching config
  * internal/providers/aws: fix panic when an IMDSv2 token is present
  * internal/resource/http: re-order initial backoff ramping
  * internal/providers/util: drop dead code
  * ci: move Travis jobs to GitHub actions
  * *: fix errcheck warnings
  * internal/log: drop the error return to appease golanci-lint
  * internal/providers/packet: fix ineffassign warning
  * internal/exec/stages/files: fix the EntrySort test
  * internal: support IMDSv2 for AWS metadata service
  * config/*: require filesystems.format with wipeFilesystem or mountOptions
  * docs: make storage.filesystems.path field optional
  * aws: Log if we fail to determine the EC2 region
  * docs: move systemd.units.name uniqueness constraint to units
  * *: fix gosimple warnings
  * *: fix deadcode warnings
  * *: fix staticcheck warnings
  * config/*: fix nil deref on partitions with no number or label
  * config: add specs newer than 3.0 to TestConfigStructure
  * news: add notes for 2.8.1
  * config/merge: support struct pointers
  * test: drop stale comment
  * tests: Remove unused checkOnStrings
  * news: add notes for 2.8.0
  * config: deprecate MergeStruct()
  * config/merge: allow obtaining a transcript of merge operations
  * config/merge: access field name as fieldMeta.Name
  * config/merge: test primitive list items in slice case 1
  * config/merge: fix typo
  * config/merge: fix comments and add a couple more
  * config/util: remove stray print when parsing invalid JSON
  * vendor: update vcontext
  * docs/development: update dep list for blackbox tests
  * tests/positive: Add tests for masking and unmasking units
  * units: add support for unmasking systemd units
  * release-checklist: minor updates to the release instructions
  * tests/positive/general: add test for merging multiple base configs
  * tests/positive/general: update base config reference
  * docs/development: update spec stabilization to avoid CI breakage
  * release-checklist: drop download_ignition.sh
  * providers/system: support .d directory for base config fragments
  * docs/migrating-configs: spell out Google Cloud Storage
  * release-checklist: update packaging section</changelog>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
</package>
<package pkgid="caad5decfb6b70f7a6dac4c67c6fe96395a03ce9819d26e132166109e9383282" name="info" arch="x86_64">
  <version epoch="0" ver="6.5" rel="4.17"/>
  <changelog author="rmaliska@suse.com" date="1484913600">- Update to version 6.3:
  * Language:
    + The commands `@setcontentsaftertitlepage' and
    `@setshortcontentsaftertitlepage' have been removed.
    + @-commands are no longer supported within `@errormsg'.
  * texinfo.tex:
    + For a couple of characters (opening and closing braces), use glyphs
    from the standard TeX math fonts instead of using EC fonts which are
    less likely to be installed.
    + Use of user-defined macros in the text of an index entry is more
    reliable when the text contains Texinfo @-commands.
    + @synindex and @syncodeindex have been fixed (broken in the last
    release).
    + Support added for native UTF-8 support with XeTeX and LuaTeX.
    + Support of PDF output with XeTeX improved.
    + You can use a new file doc/texinfo-ja.tex for Texinfo documents in
    Japanese.  doc/short-sample-ja.tex is a sample document.  New
    support file doc/txi-ja.tex for Japanese.
    + texi2any:
    + Fix handling of compiler options when building Perl extension modules.
  * texi2dvi:
    + Can now process files whose absolute paths contain space characters,
    as long a relative path to the file is given.  Better support of
    files with unusual characters in their names.
    + No longer exits prematurely in some circumstances (due to the script
    running under "set -e").
    + Bug fixed which made the `--command' and `--tidy' options
    incompatible.
  * info:
    + Handling of "invalid" value in infokey file fixed.</changelog>
  <changelog author="mpluskal@suse.com" date="1499860800">- Update to version 6.4:
  * texi2any:
    + for HTML output, place section names before the manual in page
    titles, instead of after them, so it is easier to distinguish pages
    if titles are truncated
    + starting points for ordered lists beginning with 0 or a letter of
    the alphabet are output as attributes on the &lt;ol&gt; tag, as was
    case for Texinfo 4.13 and earlier
    + a bit faster
    + some discrepancies in paragraph formatting between Perl extension
    modules and interpreted Perl modules have been fixed
    + `MACRO_BODY_IGNORES_LEADING_SPACE' customization variable removed,
    and `indent_menu_descriptions' is no longer a possible value for
    `TREE_TRANSFORMATIONS' (as these features did not work as
    documented)
  * info:
    + the `up-line' and `down-line' commands now are like the other
    scrolling commands and are no longer confined to a single node
    (depending on the value of `scroll-behaviour')
    + supplying the --all option with --index-search displays a list
    of matching index entries
    + the style variables like `link-style' can now be set while info
    is running
    + display bug fixed where color could be turned off prematurely
    + several other bugs fixed
    + better portability in test suite
    + do not fall back to showing the dir node if a manual isn't found
    + Do not attempt any kind of conversion of CR LF line endings,
    except on MS-DOS/Windows, when it is done unconditionally.  (This
    replaces a more complicated approach, where this conversion would
    take place if there was a problem finding a node in a file.)  The
    main effect of this change is that Info files with CR LF line
    endings, which would have been produced on MS-DOS/Windows with old
    versions of makeinfo, are only supported on such operating systems.
    + a few of the key bindings under --vi-keys have been changed for
    consistency or to match the documentation
  * texinfo.tex
    + a DVI file with a single empty page can be output again, which
    restores the behavior from Texinfo 6.0 and earlier
- Small packaging clenup:
  * Drop conditions for old releases
  * Run spec-cleaner
  * Run testsuite</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Change perl requires to be exactly the perl version makeinfo was
  built against. We ship a perl loadable module which is hard
  linked to the right version.</changelog>
  <changelog author="coolo@suse.com" date="1507377600">- Do not provide perl() - the modules are not globally available
  (bsc#1062028)</changelog>
  <changelog author="coolo@suse.com" date="1507377601">- Drop require on perl(Locale::Messages) as long as we bundle
  perl-libintl-perl (the system one leaves tests failing)</changelog>
  <changelog author="werner@suse.de" date="1507550400">- Avoid also provide libtool() on texinfo specific perl linkage</changelog>
  <changelog author="mpluskal@suse.com" date="1515067200">- Update to version 6.5:
  * info:
    + some bugs fixed:
    a bug where a segfault could happen in the regex search, for
    example when the user entered a single \ as the search string
    + another bug which could make nodes inaccessible in long
    "split" info files
    + a bug where it was not possible to follow a cross-reference
    that was split across more than one line has been fixed
    + do not fall back to a man page if following a cross-reference
    in an info file failed
    + if looking for a file failed, do not convert the name of a
    file to lower-case and look for it again
  * texinfo.tex
    + some faulty definitions for Unicode characters have been
    changed or removed
    + fix indentation in table of contents for entries that are
    split across multiple lines
  * texi2dvi
    + a bug that broke the processing of LaTeX files that did not
    use BibTeX has been fixed
  * texi2any
    + output the encoding declaration of a HTML file earlier so it
    will always occur within first 1024 bytes of file
    + `INLINE_INSERTCOPYING' removed as a customization variable</changelog>
  <changelog author="werner@suse.de" date="1516968000">- Do not require bash for package info (boo#1077744)</changelog>
  <changelog author="fvogt@suse.com" date="1519387200">- Use %license (boo#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1523016000">- install-info_exitcode.patch: install-info needs to return success
  when it does nothing. We need 0 return value even on failure as
  old packages in SLE-11 and SLE-12 can become uninstallable.
  (bsc#1084997)</changelog>
</package>
<package pkgid="d095c1aa727abb1a345a7e85526da5741cb5dfa85ca4fce2ee0a3bf9d11fadff" name="iproute2" arch="x86_64">
  <version epoch="0" ver="5.3" rel="5.5.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- add more follow-up fixes up to upstream 4.20 (bsc#1085669)
  bridge-fix-typo-in-hairpin-error-message.patch
  iproute-Abort-if-nexthop-cannot-be-parsed.patch
  iplink_vrf-Save-device-index-from-response-for-retur.patch
  devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  ip-route-Fix-segfault-with-many-nexthops.patch
  rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  macsec-fix-off-by-one-when-parsing-attributes.patch
  ip-route-Fix-for-memleak-in-error-path.patch
  ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  ip-route-Fix-nexthop-encap-parsing.patch
  rdma-Fix-broken-32-bit-compilation.patch
  rdma-Fix-incorrectly-handled-NLA-validation.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726402">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
</package>
<package pkgid="58d015b4ad114dbad557ea2205ee7dfe3b7a6e1a1c04a12e94cacec13d4237d8" name="ipset" arch="x86_64">
  <version epoch="0" ver="6.36" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Update to new upstream release 6.30
  * hash:ipmac type support added to ipset</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 6.31
  * ipset: avoid kernel null pointer exception in ipset list:set
  * fix bug: sometimes valid entries in hash:* types of sets were
    evicted
- Update to new upstream release 6.32
  * fix possible truncated output in ipset output buffer handling</changelog>
  <changelog author="kstreitova@suse.com" date="1505476800">- fix build for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1548849600">- add ipset-6.36_service_names_for_ports.patch to fix parsing
  service names for ports. Parsing is attempted both for numbers
  and service names and the temporary stored error message
  triggered to reset the state parameters about the set
  [bsc#1122853]</changelog>
</package>
<package pkgid="dc9d3368302d81990ab52dfd0e8464e3c28bf898336d3535bf12dc1956f7de6e" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.8.2
  * Fix incorrect handling of various targets and options in
    iptables-nft,ebtables-nft,arptables-nft.</changelog>
  <changelog author="kstreitova@suse.com" date="1554379200">- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
  where 'iptables -L' reads garbage from the struct as the kernel
  never filled it in the bugged case. This can lead to issues like
  mapping a few TiB of memory [bsc#1106751].</changelog>
  <changelog author="jengelh@inai.de" date="1558526400">- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
  0001-include-extend-the-headers-conflict-workaround-to-in.patch
  to fix build with older linux-glibc-devel. [boo#1132821]</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.8.3
  * ebtables: Fix rule listing with counters
  * ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
  0001-include-fix-build-with-kernel-headers-before-4.2.patch
  (upstreamed)</changelog>
  <changelog author="kstreitova@suse.com" date="1567771200">- add missing Provides/Obsoletes for the renamed package
  iptables-backend-nft (was iptables-nft)</changelog>
  <changelog author="kstreitova@suse.com" date="1569844800">- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.8.4
  * Fix for wrong counter format in `ebtables-nft-save -c` output.
  * Print typical iptables-save comments in arptables- and
    ebtables-save, too.
  * xt_owner: add --suppl-groups option
  * Remove support for /etc/xtables.conf
  * Restore support for "-4" and "-6" options in rule lines.</changelog>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
</package>
<package pkgid="2d695bdd00efae493aedae2235dcd63a87887128320fe53cc4cad79f982909c9" name="iputils" arch="x86_64">
  <version epoch="0" ver="s20161105" rel="8.3.1"/>
  <changelog author="pvorel@suse.cz" date="1504785600">- Update to version s20161105 (Changes taken from the RELNOTES file)
  * ping: eliminate deadcode &amp; simplify
  * ping: do not allow oversized packets to root
  * correctly initialize first hop
  * ping: fix ping -6 -I
  * arping,doc: fix documentation of -I
  * ping: fix error message when getting EACCES from connect()
  * renamed INSTALL to INSTALL.md
  * (re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21
  * ping: Silence GCC warnings when building with -fstrict-aliasing
  * tftpd: Drop supplementary groups for root
  * libgcrypt: fix static linking
  * doc: Inserted a missing word
  * tracepath6: avoid redundant family variable
  * tracepath: borrow everything good from tracepath6
  * tracepath: switch to dual-stack operation
  * tracepath: remove now redundant tracepath6
  * docs: fix parallel build of manpages
  * ping: remove assignments of values that are never read
  * docs: remove references to ping6 and traceroute6
  * ping: work with older kernels that don't support ping sockets
  * Revert "ping_common.c: fix message flood when EPERM is encountered in ping"
  * reorder -I option parsing (boo#1057664)
  * ping: also bind the ICMP socket to the specific device
- tracepath6 is now symlink to tracepath.</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1511870400">- Reintroduce rarpd as subpackage
- Explicitly list content in filelist as we have two subpackages
  now</changelog>
  <changelog author="meissner@suse.com" date="1512043200">- mark ping also verify not caps, as these are changed by the
  permissions package. (bsc#1065835)</changelog>
  <changelog author="mpluskal@suse.com" date="1512820800">- Add systemd service for rarpd</changelog>
  <changelog author="pvorel@suse.cz" date="1512993600">- iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
  (rdisc is in a separate package)</changelog>
  <changelog author="mpluskal@suse.com" date="1512993601">- Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
  was using in.* names is obsolete anyways)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515153600">- Backport iputils-ping-fix-pmtu-for-ipv6.patch from upstream
  to fix PMTU discovery in ping6. (bsc#1072460)</changelog>
  <changelog author="jcaamano@suse.com" date="1523880000">- Backport license information from upstream (bnc#1082788):
  iputils-add-license-info.diff</changelog>
  <changelog author="pvorel@suse.cz" date="1597752000">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Update iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  (backport 4471ac6 to add changes in header files)
- Use git format for iputils-ping-fix-pmtu-for-ipv6.patch (required by
  %autosetup -p1)
- Use %autosetup -p1</changelog>
</package>
<package pkgid="24987e4cad369813bcbe539cd60b36e23110c3be66ccba511a8c0a4d1ddb0f38" name="ipw-firmware" arch="noarch">
  <version epoch="0" ver="9" rel="1.23"/>
  <changelog author="agruen@suse.de" date="1141732800">- Add modalias tags (155357).</changelog>
  <changelog author="cthiel@suse.de" date="1141819200">- Prereq module-init-tools and grep, to make %post scripts work</changelog>
  <changelog author="jg@suse.de" date="1142856000">- fixed Supplements (bug 159079)</changelog>
  <changelog author="seife@suse.de" date="1154952000">- added ipw2000 firmware version 3.0 (for kernel 2.6.18)</changelog>
  <changelog author="jg@suse.de" date="1170417600">- reload modules after installation only when necessary
  (bug 210964)
- updated ipw3945 ucode to version 1.14.2, changes:
  * Fixed a fairly significant problem with some tuners not being
    able to lock properly onto a channel's frequency on B/G band.
  * Fixed a problem regarding power management.
  * Fxied lame scan results problem on Bugzilla #1085.</changelog>
  <changelog author="jg@suse.de" date="1174046400">- removed /lib/firmware from filelist</changelog>
  <changelog author="hschaa@suse.de" date="1205236800">- Remove ipw3945-firmware as ipw3945-kmp is not shipped anymore
  with 11.0 due to its successor iwl3945</changelog>
  <changelog author="seife@opensuse.org" date="1260360000">- upgrade ipw2200 firmware to version 3.1</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359806400">- PreReq modutils instead of module-init-tools otherwise
  we cannot switch to kmod cleanly</changelog>
</package>
<package pkgid="cba7d59c3c1381697bf3c7d42c0a7025e183a5aef12fb7785ff6c17399ff8eed" name="irqbalance" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="12.6.1"/>
  <changelog author="fschnizlein@suse.com" date="1488369600">- Remove superfluous comment out man package packing</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="egotthold@suse.com" date="1538395200">- Removed aarch64-compile-fixes.patch because it is mainline now.
- Update to version 1.4.0:
  * Fixed an erroneous calculation of min_load that restricted candidates to a
    subset of objects
  * Fixed powerpc hotplug detection
  * Cleaned up syslog target dependency
  * Added some self test infrastructure (via make check)
- Update to version 1.3.0
  * New features in this release:
    optimization of platform device irq detection
    Added sample udev rules to trigger irq rescans on device add/remove
    Made irqbalance ui an optional compile component
    Added support for Intel CoD
    Add -v | --version option to command line
  * Bug fixes in this release:
    Misc compiler warning fixes and spelling errors
    Compilation error fix on aarch64
    Compilation error fix when using clang in c99 mode
    Unused variable cleanup
    Lots of memory leak cleanup in irqbalance-ui
    Prevent irqbalance from running in a container
    Fix irq affinity assignment in some cases to wrong numa node
    Fix oneshot mode
    exclude legacy irq 255
  * Deprecations:
    without-glib2 is removed, we just need it enough that we can't dummy it up
    anymore</changelog>
  <changelog author="trenn@suse.de" date="1538654400">- Allow compilation with SLE-12 and before by:
  * removing -std=C99 Latest compiler version does not complain
  anymore, SLE12 SPx and before did.
  * Fix a possible buffer overflow compiler warning
  A fix_buffer_overflow_compiler.patch</changelog>
  <changelog author="ohering@suse.de" date="1572004800">- In HyperV VMs all NVME MSI interrupts are set to unmanaged to
  compensate the lack of matrix.c in pre-v4.20 kernels.
  Irqbalanced is supposed to spread the load. (bsc#1119461, bsc#1154905, bsc#1138190)
  Performance can be improved further with --hintpolicy=subset
- add 0001-Revert-remove-affinity_hint-infrastructure.patch
- add set-numa-node.patch
- add 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="ohering@suse.de" date="1573732800">- Revert previous changes for kernel 5.3+
- remove 0001-Revert-remove-affinity_hint-infrastructure.patch
- remove set-numa-node.patch
- remove 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1614859200">- Due to a bug in irqbalance's parsing of /sys/devices/system/cpu/cpu*/node*
  entries, all CPUs is considered to be on NUMA node 0. Backport fix for
  ambiguous parsing of *node* entries in /sys from upstream to fix this issue.
  (bsc#1156315, bsc#1182254)
- add fix-ambiguous-parsing-of-node-entries-in-sys.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1615291200">- Correctly detect the NUMA node of non-PCI devices.
  (bsc#1156315 bsc#1183157)
- add also-fetch-node-info-for-non-PCI-devices.patch</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1615550400">- Adapt also-fetch-node-info-for-non-PCI-devices.patch to v1.4.0, and
  backport process_one_line() and get_int() which is required for it
  to work.</changelog>
  <changelog author="trenn@suse.de" date="1617278400">- not balancing interrupts in Xen guests (bsc#1178477, bsc#1183405)
  A procinterrupts-check-xen-dyn-event-more-flexible.patch</changelog>
</package>
<package pkgid="be2ed6921b7acb383512bb8a53d60ce7d54d82cbd1d2920e2c6f3dc67008b831" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.6" rel="150300.32.15.1"/>
  <changelog author="lduncan@suse.com" date="1620820800">- Merge latest upstream, which added fix (bsc#1185930):
  * Set default 'startup' to 'onboot' for FW nodes</changelog>
  <changelog author="lduncan@suse.com" date="1626868800">- Merge latest upstream, which includeds:
  * Support the "qede" CMA-card driver. (bsc#1188579)
  * iscsistart: fix null pointer deref before exit</changelog>
  <changelog author="lduncan@suse.com" date="1629460800">- Merged latest upstream, which includes:
  * iscsid: set PR_SET_IO_FLUSHER (bsc#1188869)</changelog>
  <changelog author="lduncan@suse.com" date="1631102400">- Updated to latest upstream 2.1.5 as 2.1.5-suse, which contains
  these changes not already present:
  * Handle IPv6 interfaces correctly. (bsc#1187958)
  * Handle qedi correctly in NPAR mode (bsc#1187958)
  * Update iscsiadm man page (bsc#1187958)
  * Update iface.example for ipv6
  * Change iscsi IP type from defines to enum.
  * Handle recv() returning 0 in iscsid_response()</changelog>
  <changelog author="lduncan@suse.com" date="1633003200">- Update to latest from upstream, fixing:
  * Moving the executables from /sbin to /usr/sbin (bsc#1191054)
  * Remove default dependencies from iscsi-init.service
  (bsc#1187190)</changelog>
  <changelog author="lduncan@suse.com" date="1633435200">- Fix possible systemd cycle by adding an "obsoletes" for
  the old libopeniscsiusr for older versions.</changelog>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
</package>
<package pkgid="3ca1da29b8b96fb60a99c419887e8bd3839ac2ac4a820b96c68502564a7eb9ad" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.13" rel="3.1"/>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
  <changelog author="kukuk@suse.de" date="1547208000">- Update to version 1.7
  - automatically generate issue file [bsc#1116825]</changelog>
  <changelog author="kukuk@suse.com" date="1581508800">- Update to version 1.8
  - Handle network interface renames</changelog>
  <changelog author="kukuk@suse.com" date="1588248000">- Update to version 1.9
  - Fix path for systemd files</changelog>
  <changelog author="kukuk@suse.com" date="1594123200">- Update to version 1.10
  - Display wlan interfaces [bsc#1169070]</changelog>
  <changelog author="fvogt@suse.com" date="1601985600">- Handle the .path unit in scriptlets as well</changelog>
  <changelog author="kukuk@suse.com" date="1603108800">- Update to version 1.11
  - Don't display issue.d/*.issue files, agetty will do that [bsc#1177891]
  - Ignore /run/issue.d in issue-generator.path, else issue-generator will
    be called too fast too often [bsc#1177865]
  - Ignore *.bak, *~ and *.rpm* files [bsc#1118862]</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 1.12
  - Update manual page
  - Use python3 instead of python 2.x</changelog>
  <changelog author="kukuk@suse.com" date="1622116800">- Update to version 1.13
  - SELinux: Do not call agetty --reload [bsc#1186178]</changelog>
</package>
<package pkgid="f3bc58e1561aa623161eff428134b96f79b912d73a50f067d8c961685ab9914e" name="jq" arch="x86_64">
  <version epoch="0" ver="1.6" rel="3.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="3561bb0534240425d9a99a32c1db4b87ef6497aa0c7c636b30258abd19e9f118" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="14.38"/>
  <changelog author="sbrabec@suse.com" date="1506081600">- Version update to 2.0.4:
  * translation updates
  * support for U+202F
  * minor fixes and code cleanup
  * minor improvements and more characters support
- Enable vlock (bsc#1056449, FATE#261).</changelog>
  <changelog author="sbrabec@suse.com" date="1507896000">- Add vlock.pamd PAM file (bsc#1056449#c8).
- Clean spec file.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fbui@suse.com" date="1512561600">- Drop from some fill-up templates, a couple of sysconfig variables no
  more read by systemd (fate#319454)
  So the relevant settings can be defined in only one place.</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Move initial NumLock handling from systemd back to kbd:
  * Add kbdsettings service written by Thomas Blume (boo#1010880,
    kbdsettings, kbdsettings.service, numlockbios.c,
    update sysconfig.console and sysconfig.keyboard).
  * Exclude numlockbios support for non x86 platforms
    (kbdsettings-nox86.patch).
- Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
  boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
  drop kbd.fillup).
- Fix paths in kbd.pl.</changelog>
  <changelog author="sbrabec@suse.com" date="1521115200">- Do not cause error on UNICODE characters &gt;= 0xF000 (e. g.
  ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1522929600">- Disable characters &gt;=U+F000. These do not work properly
  (bsc#1085432#c15, kbd-unicode-fxxx.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
</package>
<package pkgid="daec9e9ddace8573e11089fcd1e11a307c1fd74b649e632bfec001db7d821461" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.0.4" rel="14.38"/>
  <changelog author="sbrabec@suse.com" date="1506081600">- Version update to 2.0.4:
  * translation updates
  * support for U+202F
  * minor fixes and code cleanup
  * minor improvements and more characters support
- Enable vlock (bsc#1056449, FATE#261).</changelog>
  <changelog author="sbrabec@suse.com" date="1507896000">- Add vlock.pamd PAM file (bsc#1056449#c8).
- Clean spec file.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="fbui@suse.com" date="1512561600">- Drop from some fill-up templates, a couple of sysconfig variables no
  more read by systemd (fate#319454)
  So the relevant settings can be defined in only one place.</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Move initial NumLock handling from systemd back to kbd:
  * Add kbdsettings service written by Thomas Blume (boo#1010880,
    kbdsettings, kbdsettings.service, numlockbios.c,
    update sysconfig.console and sysconfig.keyboard).
  * Exclude numlockbios support for non x86 platforms
    (kbdsettings-nox86.patch).
- Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
  boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
  drop kbd.fillup).
- Fix paths in kbd.pl.</changelog>
  <changelog author="sbrabec@suse.com" date="1521115200">- Do not cause error on UNICODE characters &gt;= 0xF000 (e. g.
  ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1522929600">- Disable characters &gt;=U+F000. These do not work properly
  (bsc#1085432#c15, kbd-unicode-fxxx.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
</package>
<package pkgid="25c37e97e06e841967c2b57b6ffa9e4e796fffe298ba95e6724239dc3463af3e" name="kdump" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="18.3.1"/>
  <changelog author="ptesarik@suse.com" date="1585569600">- kdump-make-sure-that-the-udev-runtime-directory-exists.patch:
  Make sure that the udev runtime directory exists (bsc#1164713).</changelog>
  <changelog author="ptesarik@suse.com" date="1605873600">- kdump-do-not-add-rd.neednet.patch: Do not add 'rd.neednet=1' to
  dracut command line (bsc#1177196).</changelog>
  <changelog author="ptesarik@suse.com" date="1606132800">- kdump-remove-console-hvc0-from-commandline.patch: remove
  console=hvc0 from commandline (bsc#1173914).
- kdump-set-serial-console-from-Xen-cmdline.patch: set serial
  console from Xen cmdline (bsc#1173914).</changelog>
  <changelog author="ptesarik@suse.com" date="1614945600">- kdump-query-systemd-network.service.patch: Query systemd
  network.service to find out if wicked is used (bsc#1182309).
- kdump-check-explicit-ip-options.patch: Do not add
  network-related dracut options if ip= is set explicitly
  (bsc#1182309).</changelog>
  <changelog author="ptesarik@suse.com" date="1617192000">- Increase extra crash kernel reservation for LUKS Argon2 PBKDF
  (bsc#1180513):
  * kdump-Implement-KString-isHexNumber.patch
  * kdump-Mount-and-device-resolution-using-libmount-and-lsblk.patch
  * kdump-calibrate-Add-LUKS2-Argon2-requirements-to-the-reser.patch
  * kdump-Do-not-list-all-block-devices-if-no-block-devices-ar.patch
  * kdump-Enumerate-all-BTRFS-devices-for-btrfs-mount-points.patch
  * kdump-calibrate-Fix-kernel-command-line-parsing.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1617883200">- kdump-Add-bootdev-to-dracut-command-line.patch: Add 'bootdev=' to
  dracut command line (bsc#1182309).</changelog>
  <changelog author="ptesarik@suse.com" date="1632398400">- kdump-ensure-initrd.target.wants-directory.patch: Make sure that
  initrd.target.wants directory exists (bsc#1172670).</changelog>
  <changelog author="ptesarik@suse.com" date="1632398401">- kdump-avoid-endless-loop-EAI_AGAIN.patch: Avoid an endless loop
  when resolving a hostname fails with EAI_AGAIN (bsc#1183070).
- kdump-install-etc-resolv.conf-using-resolved-path.patch: Install
  /etc/resolv.conf using its resolved path (bsc#1183070).</changelog>
  <changelog author="ptesarik@suse.com" date="1632398402">- kdump-fix-incorrect-exit-code-checking.patch: Fix incorrect exit
  code checking after "local" with assignment (bsc#1184616
  LTC#192282).</changelog>
  <changelog author="ptesarik@suse.com" date="1632398403">- kdump-do-not-iterate-past-end-of-string.patch:
  URLParser::extractAuthority(): Do not iterate past end of string
  (bsc#1186037).</changelog>
</package>
<package pkgid="e5266ac71c80a94fb61d64bb7ca2845ed0c6387d6df2e786065ec3fef85d089f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.54.1"/>
  <changelog author="msuchanek@suse.de" date="1646049600">- ibmvnic: Allow queueing resets during probe (bsc#1196516
  ltc#196391).
- ibmvnic: clear fop when retrying probe (bsc#1196516 ltc#196391).
- ibmvnic: init init_done_rc earlier (bsc#1196516 ltc#196391).
- ibmvnic: register netdev after init of adapter (bsc#1196516
  ltc#196391).
- ibmvnic: complete init_done on transport events (bsc#1196516
  ltc#196391).
- ibmvnic: define flush_reset_queue helper (bsc#1196516
  ltc#196391).
- ibmvnic: initialize rc before completing wait (bsc#1196516
  ltc#196391).
- ibmvnic: free reset-work-item when flushing (bsc#1196516
  ltc#196391).
- commit 1cc99d0</changelog>
  <changelog author="bp@suse.de" date="1646049601">- x86/speculation: Use generic retpoline by default on AMD
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- commit bed48b1</changelog>
  <changelog author="tiwai@suse.de" date="1646136000">- lib/iov_iter: initialize "flags" in new pipe_buffer
  (bsc#1196584).
- commit 4f3bbf5</changelog>
  <changelog author="mbrugger@suse.com" date="1646136001">- arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: Add part number for Arm Cortex-A77 (bsc#1191580
  CVE-2022-0001 CVE-2022-0002).
- arm64: proton-pack: Report Spectre-BHB vulnerabilities as part
  of Spectre-v2 (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: Add percpu vectors for EL1 (bsc#1191580 CVE-2022-0001
  CVE-2022-0002).
- arm64: entry: Add macro for reading symbol addresses from the
  trampoline (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Add vectors that have the bhb mitigation sequences
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Add non-kpti __bp_harden_el1_vectors for
  mitigations (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Allow the trampoline text to occupy multiple pages
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Make the kpti trampoline's kpti sequence optional
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Move trampoline macros out of ifdef'd section
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Don't assume tramp_vectors is the start of the
  vectors (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Allow tramp_alias to access symbols after the
  4K boundary (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Move the trampoline data page before the text page
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Free up another register on kpti's tramp_exit path
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- arm64: entry: Make the trampoline cleanup optional (bsc#1191580
  CVE-2022-0001 CVE-2022-0002).
- arm64: entry.S: Add ventry overflow sanity checks (bsc#1191580
  CVE-2022-0001 CVE-2022-0002).
- commit 284cd49</changelog>
  <changelog author="mbrugger@suse.com" date="1646136002">- arm64: Add Cortex-X2 CPU part definition (bsc#1191580
  CVE-2022-0001 CVE-2022-0002).
- commit c3c4a06</changelog>
  <changelog author="mbrugger@suse.com" date="1646136003">- KVM: arm64: Add templates for BHB mitigation sequences
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- Refresh
  patches.suse/kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch.
- commit 8c9b0c2</changelog>
  <changelog author="mbrugger@suse.com" date="1646136004">- arm64: Mitigate spectre style branch history side channels
  (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- Update config files.
- commit d035616</changelog>
  <changelog author="mbrugger@suse.com" date="1646136005">- arm64: Use the clearbhb instruction in mitigations (bsc#1191580
  CVE-2022-0001 CVE-2022-0002).
- arm64: add ID_AA64ISAR2_EL1 sys register (bsc#1191580
  CVE-2022-0001 CVE-2022-0002).
- KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered
  and migrated (bsc#1191580 CVE-2022-0001 CVE-2022-0002).
- commit b546cd9</changelog>
  <changelog author="tiwai@suse.de" date="1646395200">- Update patch reference for iov security fix (CVE-2022-0847 bsc#1196584)
- commit 1dafeb6</changelog>
  <changelog author="tiwai@suse.de" date="1646395201">- Revert PCI MSI-X patch that caused a regression on network devices (bsc#1196403)
  Deleted:
  patches.suse/PCI-MSI-Mask-MSI-X-vectors-only-on-success.patch
- commit 0c68bb9</changelog>
</package>
<package pkgid="4ac808173221cbccca656fd30b22c5c9c47e3c54ae00e879321f645295bf24a2" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.54.1.150300.18.35.3"/>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="07bde419aa723eb3ca6e39c25210de18e93d23bf0faaf4d35b2a96093a409c6b" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="588b5f0d6126d408a8d51ea48691323289e99c76c6289b7514975d12220e4124" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="91bc592c3592e5727572abc6f9a19716d6056cf95405ed0f29e21b415283e155" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="5b4cdc83187501b58c43fe2b179b6dbbf596b8ea8c4c51897c722c99b92ac5b4" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="a82bcca1a6f686aad777972acce8e2142fbbb01495cb4b6ba8f3e1e060c6e06f" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="40fbdd3e7377dd4af1db850ba7a260794a89bc6a645bc2304cc496dc10cda229" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="528f0cb47d09693ff5366179fc7db1d9d23459429e6d9845e7577a0bcc046bd7" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="31f1b2caf96616469f4a249df37ddb0a55d4f7b3001ff3e4b2718c1f51659147" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="d40f4159e5281a5e8ea8f0ba234a47551033b464acb123382baab1bb1d270443" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="9650564c5aecf837f7812c38657a8646bca76eeb689be999afb7c3d5ec2f2169" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="15947649f9bcf46514d5081e817ff56d938dd0d8ae5978c90f36a797c1000570" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="b68bd28a9d6d50f55d209b9c51cf4a2b7d62fc2318402577cd09bb64a6048470" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="82f120ffb5b5efafc15b265ce532cff0bbff1f9f116479cdf09f5bdb3c9046a2" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="c4a8f6e636d6da648e308e17ae40c972c67c551d7bf221a927d41fd233341d9b" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="6dee9860bfe43ea8c3726638302b0448ca43a52b4eb8222fb315305b68d3c908" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="e300438ea39cdde0d8ab40ac8a21f6468ac1040d1b01bddca1769cc95c15dd3e" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="edfd7189959f9396b6449e631a8936290e9f684868200dc0577de9ef73531b92" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="e142c5c1a0b04a3e366198750bbaf259eb3b438696f4e7a284250be96e1b8dc7" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="ec81c8a22619fa1d8dc1cfdd5bb1fde74829e795adfa25cf82213f2ce9527b97" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="d5eba8d252cfb5b11c91251f9af840fa1bea5074e2f310128beaf313e4b95ee9" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="ff973de4b1492fad7410313228267fd912cfe8046774ffbcbc077c8a967e2467" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="8e50a76071ee50657859b7c3e79a9c9d439c4f92b61837d24a0761c465b8f534" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="2f38d043ea403d3bde703cf6c482dee78e258903028b0bf6bcafc5c6405377c0" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="94a66b05bfdc0f07dcf9f0ff8a7eb6de576992771c7600c4e2c03fceac88a3c1" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="68b9c62f730e8e5d61d11af0ec0795200e98e7a9c6791b22e13607bbc9f6c1bf" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="752ec1c82f5d6c83594afbf142c787188a322a8ece0e1028ff911ee00e622463" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="08b379c7627ab44c4fa080db24e6c112a091243a6d0dd6df817392706a67aa03" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="ef8f865e4aaf9e824f555765fc880608cac06941b0e2573ba075af3374fc2e9f" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="5f566c78a42aa86aee0d50d7333806858f4e1d267617f441f9da2ae3fee13c47" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="f17e65f20aa6d5ce190a779f54137f777a127c09d8840d0c979694e08f28f47f" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="2165c5bde14f193c301d2df8454f944586c8887fbaed535bc75f5398bca4b705" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="9c5a28418f9d6a33a130aca3675b909914790f4fa0067efe672b847dec8f6597" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="406fcc660410bb0a9a73c7e635acdbbcc743cf4346725b772460d01bbd130630" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.13.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- blacklist.conf: arm64: add fix for unsupported SOC
- commit 7c4e5f6</changelog>
  <changelog author="ykaukab@suse.de" date="1622462401">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462402">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462403">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462404">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
</package>
<package pkgid="598b0a5e150178932cdf8fa2879aa80c1603fbc824a9b9b304411407542245c2" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="10.3.1"/>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="ptesarik@suse.com" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="clin@suse.com" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="clin@suse.com" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="ptesarik@suse.com" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="ohering@suse.com" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="9ed7a5df977fe2629311b32c0586b289c146c6da662b80cf9ddbc0c492b87aa4" name="keyutils" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="5.6.1"/>
  <changelog author="meissner@suse.com" date="1509969600">- add keyutils-devel for baselibs, to allow biarch LTP builds.
  (bsc#1061591)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="meissner@suse.com" date="1540814400">- updated to 1.5.11 (bsc#1113013)
  - Add keyring restriction support.
  - Add KDF support to the Diffie-Helman function.
  - DNS: Add support for AFS config files and SRV records</changelog>
  <changelog author="astieger@suse.com" date="1540814401">- add upstream signing key and verify source signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
</package>
<package pkgid="67a5230a671f2a9e78fa93263264fb5665dbee4c8c4708357be346fd0a2fc66e" name="kmod" arch="x86_64">
  <version epoch="0" ver="29" rel="4.15.1"/>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
</package>
<package pkgid="8fd9a727dde127a6376aca948152c2d8df71385fa4ed2e04171da3328ee7a8cd" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.8.5+82+suse.746b76e" rel="2.7.1"/>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
  <changelog author="mwilck@suse.com" date="1632225600">- Update to version 0.8.5+82+suse.746b76e:
  * libmultipath: avoid buffer size warning with systemd 240+
  (bsc#1189176)
- Add a versioned dependency of multipath-tools on libmpath0
  (bsc#1190622)</changelog>
</package>
<package pkgid="d99778b213cf09dc69953e8ec218f1fbc600947eb4668a594735e13ab5d96c6b" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="150300.8.3.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2; (jsc#SLE-23329);
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
</package>
<package pkgid="fb0c523c3a6b26350708d9fd2a09bd09d69f37326bcddbbf6b7b86db39bae9ac" name="less" arch="x86_64">
  <version epoch="0" ver="530" rel="3.3.2"/>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="kstreitova@suse.com" date="1426248000">- add less-458-out_of_bounds_read.patch to fix an "out of bounds
  read access in the UTF-8" vulnerability (bnc#921719),
  (CVE-2014-9488)</changelog>
  <changelog author="vcizek@suse.com" date="1435233600">- fix a crash in hilite_line (boo#915387)
  * added less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
</package>
<package pkgid="9991eb84bbce57be430fcc8d50670a43d31e00a109fcd1cbd84dc48c9e9f7c00" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="732502c5d9d86b7c972aa3b91a50291a665d2523fbf5be3bacba4f73de66509c" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="becafe1aed4c0ca5f6501b694eb34fa28999612814ae759b861af0fc75c6a790" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="5c5c42a63a8daa47782607f2fea03f1334cd9919ae40f3428ba925587c48a6b5" name="libXau6" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="1.26"/>
  <changelog author="eich@suse.de" date="1241179200">- revert static library and .la file removal
  for SUSE versions &lt;= 11.1.</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- add baselibs.conf as a source</changelog>
  <changelog author="sndirsch@suse.de" date="1270382400">- libXau 1.0.5
- bumped version number to 7.5</changelog>
  <changelog author="sndirsch@novell.com" date="1283601600">- libXau 1.0.6
  * This minor release includes a number of packaging updates
    accumulated over the last year, and a couple of documentation
    fixes.
- bumped version number to 7.5_1.0.6
- make use of %fdupes macro
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.0.6</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXau to libXau and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Improve the handling of "normal" locking collisions
  + Documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 1.0.8:
  This maintenance release brings happiness by getting rid of things
  that make valgrind, clang, doclifter, automake, the GNOME build system,
  various other static analyzers, and obsessive developers be unhappy.
  Don't warn, be happy.</changelog>
  <changelog author="sndirsch@suse.com" date="1380542400">- U_0001-XauFileName-reset-bsize-when-malloc-failed.patch/
  U_0002-XauFileName-always-go-through-buf-allocation-if-buf-.patch
  * fixes regression in libXau 1.0.8, which resulted in a crash in
    Mozilla (bnc#831620,fdo#69929)</changelog>
</package>
<package pkgid="8ce55b6a11095a9c591dd6c5e47856f1b67bb286d58f6808198a970267d1e565" name="libXcomposite1" arch="x86_64">
  <version epoch="0" ver="0.4.4" rel="1.23"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 0.4.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1398340800">- Add missing BuildRequires</changelog>
</package>
<package pkgid="af99e8eeda475603a1431f8586cb85d4f6e441769f299d99282aaea132122dc2" name="libXcursor1" arch="x86_64">
  <version epoch="0" ver="1.1.15" rel="1.18"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Provide package descriptions and update homepage URL</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.1.13:
  + Make the version number reported in Xcursor.h match the one
    reported in xcursor.pc
  + Fix issues found by Parfait bug checking tool
  + Build system improvements
- Changes from version 1.1.12:
  + Fix leaks
  + Fix compiler warnings and issues found by clang
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.14:
  This release delivers the fix for security vulnerability CVE-2013-2003
  and makes the Makefile.am more compatible with future automake releases.</changelog>
  <changelog author="sndirsch@suse.com" date="1398686400">- added missing pkgconfig(xextproto)</changelog>
  <changelog author="sndirsch@suse.com" date="1511870400">-  U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch
  * It is possible to trigger heap overflows due to an integer
    overflow while parsing images and a signedness issue while
    parsing comments. [CVE-2017-16612] (bsc#1065386)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1512648000">- Update to version 1.1.15:
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use strdup() instead of malloc(strlen())+strcpy()
  * Fix some clang integer sign/size mismatch warnings
  * autogen.sh: use quoted string variables
  * autogen: add default patch prefix
  * autogen.sh: use exec instead of waiting for configure to finish
  * Fix heap overflows when parsing malicious files. (CVE-2017-16612)
  * Insufficient memory for terminating null of string in _XcursorThemeInherits
- Drop U_Avoid-heap-overflows-due-to-integer-overflow-signedn.patch</changelog>
</package>
<package pkgid="ed14130b749ac0c99476f38c7fc4894c63a9b21c06d11a58ec067fa847ba3339" name="libXdamage1" arch="x86_64">
  <version epoch="0" ver="1.1.4" rel="1.23"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Provide package descriptions and update URL</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1357473600">- Update to version 1.1.4:
  + This minor maintenance release cleans up the build configuration scripts,
    including making them compatible with automake-1.13, which errors out on
    the old AM_CONFIG_HEADER macro.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
</package>
<package pkgid="315f5f6c7eb09fc174474011f97fa07b9c5d5eb1f1b4a827271cd66a20086cb6" name="libXext6" arch="x86_64">
  <version epoch="0" ver="1.3.3" rel="1.30"/>
  <changelog author="sndirsch@novell.com" date="1283601600">- update to release 1.1.2
- bumped version number to 7.5_1.1.2
- make use of %fdupes macro
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1288267200">- libXext 1.2.0
  * This release of the catchall library for the X11 extensions
    without their own libraries adds documentation for many more
    of the extension API's, in the form of the documents formerly
    delivered in xorg-docs, now moved here and translated from a
    variety of formats to DocBook/XML.</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_1.2.0</changelog>
  <changelog author="jengelh@medozas.de" date="1328356800">- Remove apparently unused (Build)Requires on Xdmcp, xtrans
- Remove redundant tags/sections like %clean
  (see specfile guidelines)
- Parallel build with %_smp_mflags</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXext to libXext and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.3.1:
  + Fixes for compiler warnings
  + Improvements to formattings for all the included extension API
    specs
  + Improvements to the documentation
- Changes from version 1.3.0:
  + New API functions to support the Fence Sync Objects added in
    Sync extension version 3.1
  + Redefine the return values of several MIT-SHM API calls from
    Status (#define Status int) to Bool (typedef int Bool) to
    clarify the expected interpretation of the return values
  + Fix build issues
  + Documentation improvements
  + Build system improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.3.2:
  This release provides fixes for the recently announced security issue
  CVE-2013-1982, as well as build configuration improvements, man page
  macro cleanups to work better with doclifter, and several other small
  fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203200">- Update to version 1.3.3
  * Time for a release before the accumulated patches are old
    enough to vote.  Two new requirements: libX11 1.6 and a C89
    preprocessor.</changelog>
  <changelog author="sndirsch@suse.com" date="1406203201">- added baselibs.conf as source to specfile</changelog>
</package>
<package pkgid="df66ade1770c93d5447276fb2fc49cf7793e6b45b88751cfea991891f8f7ac6e" name="libXfixes3" arch="x86_64">
  <version epoch="0" ver="5.0.3" rel="1.24"/>
  <changelog author="sndirsch@novell.com" date="1283601600">- update to release 4.0.5
- bumped version number to 7.5_4.0.5
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_4.0.5</changelog>
  <changelog author="fcrozat@novell.com" date="1300449600">- update to release 5.0
  * Pointer barrier support, along with the usual buildsystem updates.</changelog>
  <changelog author="jengelh@medozas.de" date="1328961600">- Rename xorg-x11-libXfixes to libXfixes and utilize shlib policy</changelog>
  <changelog author="sndirsch@suse.com" date="1348574400">- specfile cleanup</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1369828800">- Update to version 5.0.1:
  This bug fix release includes the fix for the recently announced
  CVE-2013-1983, along with some other cleanups &amp; warning fixes.</changelog>
  <changelog author="sndirsch@suse.com" date="1464609600">- Update to version 5.0.2
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it
- tagged baselibs.conf as source in specfile</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 5.0.3:
  + fix Integer overflow on illegal server response</changelog>
</package>
<package pkgid="92bc0ec839c71ae3235dd9ebef1ef5c1a5e02620865800aee8e5299dfeae734e" name="libXft2" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="1.33"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 2.3.0:
  + Subpixel LCD text rendering improvements
  + Fix two crasher bugs
  + Fix compiler warnings
  + Code cleanups
  + Build system improvements
- Add pkgconfig(x11) BuildRequires: new explicit dependency
  upstream.
- Add libXft-fix-bold-fonts.patch: fix regression that broke bold
  fonts, taken from git.
- Drop libXft-2.1.7-lcd-filter-2.patch: integrated upstream.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1338984000">- Update to version 2.3.1
- Remove the libXft-fix-bold-fonts.patch (fixed in this release)</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1386763200">- Added U_use-recommended-freetype-include.patch -- Freetype upstream
  recommends using their macros together with ft2build include.
  Positive sideeffect is that this patch makes it build with both
  freetype2 2.5.1, and older version</changelog>
  <changelog author="sndirsch@suse.com" date="1402056000">- Update to version 2.3.2
  * This release fixes a build issue with FreeType 2.5.1 &amp; later,
    and fixes the prototypes in the man page for XftDrawString8 &amp;
    XftDrawRect.
  * supersedes U_use-recommended-freetype-include.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1431432000">- added baselibs.conf as source to specfile</changelog>
</package>
<package pkgid="dc5ab5c102161cd5ce08bd332237ffb9ddac34e88a691b2138f2887c48869e27" name="libXi6" arch="x86_64">
  <version epoch="0" ver="1.7.9" rel="3.2.1"/>
  <changelog author="jengelh@inai.de" date="1363694400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1365163200">- Update to version 1.7.1:
  Only a single fix: including the XFixes header to get the typedef for
  PointerBarrier. Naturally, this adds a pkgconfig build-time dependency on
  XFixes.
  Why? The header shipped with 1.7 typedef'd PointerBarrier. If you #include
  both XI and Xfixes headers, you will end up with a duplicate typedef.
  This is not an issue on gcc &gt;= 4.6 since the two typedef's are the same.
  On earlier versions this will trigger an error. gcc 4.6 -pedantic-errors
  will trigger the same error.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372420800">- Update to version 1.7.1.901:
  First and likely only RC for libXi 1.7.2. This one has a bunch of changes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995. These relate to various
  integer overflows and other corruption that happens if we trust the server
  a bit too much on the data we're being sent.
  On top of those fixes, the sequence number in XI2 events is now set
  propertly too (#64687).</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1372852800">- Update to version 1.7.2:
  Only one minor change since the RC. Again, this release contains the fixes
  for CVE-2013-1998, CVE-2013-1984 and CVE-2013-1995 so you're encouraged to
  update.
  + Remove check that can never be true.</changelog>
  <changelog author="sndirsch@suse.com" date="1405080000">- Update to version 1.7.3
  * Two important patches fixing deadlocks when using XIPassiveGrab
    requests.  You're recommended to updated. Note that we now
    require libX11 1.6, that's a new dependency over 1.7.2 but it's
    over a year old by now anyway.
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1405684800">- Update to version 1.7.4
  * Fix locking bugs with XIAllowTouchEvents() and XIUngrabTouchBegin()</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1441972800">- Update to version 1.7.5:
  A couple of important bugfixes that have accumulated over the last
  year.
  + Fix version check in _XIAllowEvents
  + Advance the request buffer by the right amount in XIChangeHierarchy
  + Fix double unlock when _XiCheckExtInit return -1.
  + XIChangeHierarchy: Add missing unlock.
  + Do not return NoSuchExtension casted to pointer as an error.
  + XIGetClientPointer: Return False on error.
  + Fix logic in _XIAllowEvents and prevent double unlock.
  + Refactor XGetExtensionVersion.
  + XIGrabDevice: Unlock display in error path.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1450785600">- Update to version 1.7.6:
  One significant change here: libXi was using raw serial numbers in event
  cookies, the one read off the wire. All other events don't use that number
  but a Xlib-internal serial number which is similar but not always the same.
  This could cause events to look out of order. With this release, libXi is
  now using the same serial number for event cookies as it uses for all other
  events.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.7.8:
  The changes of 1.7.7 are included.
  + Fix a crash introduced in the 1.7.7 release.
  + Properly validate server responses.</changelog>
  <changelog author="sndirsch@suse.com" date="1485172800">- Update to version 1.7.9:
  * Plug a memory leak
  * Check that allocating a buffer succeeded
  * Fix possible free of uninitialized pointer</changelog>
</package>
<package pkgid="3843ea73d10e5ad93e72db68c8d3ee20cc9eadcbbec549f5b374d4034921d4ec" name="libXinerama1" arch="x86_64">
  <version epoch="0" ver="1.1.3" rel="1.22"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.1.2:
  + Janitorial cleanups
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.1.3:
  This bug fix release primarily provides the fix for the recently announced
  security vulnerability CVE-2013-1985.</changelog>
</package>
<package pkgid="27b66ae9c90c53587f202641ae2c20b2498c8e0b8540efcb921709b002d1b829" name="libXrandr2" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="2.17"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1343390400">- Update to version 1.4.0:
  + Strip trailing whitespace
  + Fill in nameLen in XRROutputInfo
  + libXrandr: add support for provider objects.</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.4.1:
  This release brings the fixes for the recently announced security issue
  CVE-2013-1986, with some related hardening to avoid other issues, alongside
  a couple small build configuration &amp; compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378641600">- Update to version 1.4.2:
  This release fixes two small bugs in the library, and fixes an omission
  in the list of copyright notices in the COPYING file.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1431864000">- Update to version 1.5.0:
  Add support for monitors and fixes requires on libX11.</changelog>
  <changelog author="sndirsch@suse.com" date="1431950400">- added baselibs.conf as source in specfile</changelog>
  <changelog author="fcrozat@suse.com" date="1450267200">- update BuildRequires to pkgconfig(randrproto) &gt;= 1.5</changelog>
  <changelog author="sndirsch@suse.com" date="1475755200">- Update to version 1.5.1
  * Avoid out of boundary accesses on illegal responses
    (bnc#1003000, CVE-2016-7947, CVE-2016-7948)
  * fix: doGetScreenResources() info: redundant null check on
    calling free()
  * fix: redundant null check on calling free()</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #320388, bnc#1003000, CVE-2016-7947, CVE-2016-7948 (bsc#1041366)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511352000">- Add U_libXrandr_fix-memory-leak.patch: Fix memory leak on error
  paths.
- Drop unneeded autoconf, automake and libtool BuildRequires and no
  longer pass autoreconf.</changelog>
</package>
<package pkgid="cd5cbc5b811916b3f28f27d3a3edf428899af243f13d6ab25c670677e6270465" name="libXrender1" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="1.30"/>
  <changelog author="sndirsch@suse.de" date="1262001600">- libXrender-commit-f6f784c.diff
  * Use Data instead of Data32 to avoid truncating the filter
    parameters on 64-bit systems (bnc #567454)</changelog>
  <changelog author="sndirsch@suse.de" date="1270382400">- libXrender 0.9.5
- obsoletes libXrender-commit-f6f784c.diff
- bumped version number to 7.5</changelog>
  <changelog author="sndirsch@novell.com" date="1283601600">- update to release 0.9.6
- bumped version number to 7.5_0.9.6
- fixed Summary/Group entries in -devel package</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6_0.9.6</changelog>
  <changelog author="sndirsch@suse.com" date="1329480000">- fixed name of .changes (follows rename)</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 0.9.7:
  + Fix alpha premultiplication in XRenderParseColor
  + Compiler warning fixes
  + Documentation typo fixes
  + Build configuration fixes</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371211200">- Update to version 0.9.8:
  This bugfix release delivers the fixes for the recently announced security
  issue CVE-2013-1987.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 0.9.9
  * Fix request length calculation for XRenderCompositeText32
  * Remove fallback for _XEatDataWords, require libX11 1.6 for it</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 0.9.10:
  + Fix documentation to explicitly mention premultiplied alpha
  + Avoid OOB write in XRenderQueryFilters
  + Validate lengths while parsing server data.</changelog>
</package>
<package pkgid="4b014dd6e937b7c6b2d520e5547e0b3928ef769d6fdcda23d09dd81c88c891c7" name="libXtst6" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="1.24"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="sndirsch@suse.com" date="1330084800">- Added missing "xi" requires to pkconfig file (bnc#748808)</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.2.1:
  + Fix for gcc warning
  + Improvements to documentation
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call
- Avoid calling fdupes outside of /usr</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.2.2:
  This release provides the fix for the recently announced security issue
  CVE-2013-2063, along with a number of fixes to the build configuration.
- Packaging changes:
  + Remove Patch0: u_libXtst_Added-missing-xi-requires-to-pkconfig-file.patch
    Superseded by another upstreamed version</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.2.3:
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it
  + Out of boundary access and endless loop in libXtst</changelog>
  <changelog author="sndirsch@suse.com" date="1478088000">- tagged baselibs.conf as source in specfile</changelog>
</package>
<package pkgid="3d089660778849e0f87fe5562d14588283148eef24935bd0811b4176ba4a3d0b" name="libXv1" arch="x86_64">
  <version epoch="0" ver="1.0.11" rel="1.23"/>
  <changelog author="sndirsch@novell.com" date="1288440000">- libXv 1.0.6
  * This minor maintenance release provides the usual recent
    collection of build configuration improvements and janitorial
    cleanups.</changelog>
  <changelog author="sndirsch@novell.com" date="1292932800">- bumped version number to 7.6</changelog>
  <changelog author="jengelh@medozas.de" date="1329048000">- Rename xorg-x11-libXv to libXv and utilize shlib policy</changelog>
  <changelog author="vuntz@opensuse.org" date="1334145600">- Update to version 1.0.7:
  + Janitorial cleanups
  + Man page fix
  + Build configuration improvements</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370088000">- Update to version 1.0.8:
  This release delivers the fixes for the recently announced security issues
  CVE-2013-1989 &amp; CVE-2013-2066, plus a couple build configuration changes
  and man page fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1371988800">- Update to version 1.0.9:
  This quick fix release corrects an issue with the security fix from 1.0.8,
  in which, if the size checks did determine the response from the X server
  was too large to fit in the buffer it had allocated, XvQueryPortAttributes
  could return a pointer to the caller that pointed to uninitialized memory
  where the caller expected a nil-terminated string.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.10:
  + Remove fallback for _XEatDataWords, require libX11 1.6 for it.
  + Refactor error handling.
  + Add missing calls to _XEatDataWords when we are skipping
    _XRead.
  + Replace custom copy of GetReq macro with call to Xlib 1.5's
    _XGetRequest.
  + Require ANSI C89 pre-processor, drop pre-C89 token pasting
    support.
  + Use pad_to_int32 macro instead of repeated (x + 3) &amp; ~3
    pattern.
  + Fix sign conversion &amp; comparison warnings from clang.
  + Remove unnecessary casts from Xmalloc calls.
  + Adopt X.Org standard code style, with consistent indentation.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477656000">- Update to version 1.0.11:
  + Fix typo in dependencies for lint library
  + Protocol handling issues in libXv - CVE-2016-5407</changelog>
  <changelog author="sndirsch@suse.com" date="1478088000">- tagged baselibs.conf as source in specfile</changelog>
</package>
<package pkgid="4f0d0919c3e2bcc45a1377202b1c4ab6eff368d56e5a9cb18c962e1eb4845a6a" name="libacl1" arch="x86_64">
  <version epoch="0" ver="2.2.52" rel="4.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- add acl-2.2.52-tests.patch and enable tests, check section taken
  from Fedora package</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="jeffm@suse.com" date="1449057600">- Update to git snapshot dated 21 Sep 2015.
  - Added:
  * 0001-Install-the-libraries-to-the-appropriate-directory.patch
  * 0002-setfacl.1-fix-typo-inclu-de-include.patch
  * 0003-test-fix-insufficient-quoting-of.patch
  * 0004-Makefile-rename-configure.in-to-configure.ac.patch
  * 0005-Bad-markup-in-acl.5-page.patch
  * 0006-.gitignore-ignore-and-config.h.in.patch
  * 0007-Use-autoreconf-rather-than-autoconf-to-regenerate-th.patch
  * 0008-libacl-Make-sure-that-acl_from_text-always-sets-errn.patch
  * 0009-libacl-fix-SIGSEGV-of-getfacl-e-on-overly-long-group.patch
  * 0010-punt-debian-rpm-packaging-logic.patch
  * 0011-move-gettext-logic-into-misc.h.patch
  * 0012-test-make-running-parallel-out-of-tree-safe.patch
  * 0013-modernize-build-system.patch
  * 0014-po-regenerate-files-after-move.patch
  * 0015-build-drop-aclincludedir-use-pkgincludedir.patch
  * 0016-build-make-use-of-an-aux-dir-to-stow-away-helper-scr.patch
  * 0017-build-ship-a-pkgconfig-file-for-libacl.patch
  * 0018-read_acl_-comments-seq-rename-line-to-lineno.patch
  * 0019-read_acl_-comments-seq-switch-to-next_line.patch
  * 0020-telldir-return-value-and-seekdir-second-parameters-a.patch
  * 0021-mark-libmisc-funcs-as-hidden-so-they-are-not-exporte.patch
  * 0022-add-__acl_-prefixes-to-internal-symbols.patch
  * 0023-cp.test-Check-permissions-of-the-right-file.patch
  * 0024-libacl-acl_set_file-Remove-unnecesary-racy-check.patch
  * 0025-fix-compilation-with-latest-xattr-git.patch
  * 0026-getfacl-Fix-memory-leak.patch
  * 0027-Fix-the-display-block-nesting-in-acl.5.patch
  * 0028-setfacl-man-page-Minor-wording-improvements.patch
  * 0029-getfacl-Fix-minor-resource-leak.patch
  * 0030-Do-not-export-symbols-that-are-not-supposed-to-be-ex.patch
  * 0031-walk_tree-mark-internal-variables-as-static.patch
  * 0032-ignore-configure.lineno.patch
- Signficant spec file restructuring due to 0013-modernize-build-system.patch
- removed builddefs.in.diff</changelog>
  <changelog author="kukuk@suse.de" date="1489406400">- Add BuildRequires for system user bin needed by test suite</changelog>
  <changelog author="fvogt@suse.com" date="1490788800">- Make it possible to disable tests (for Ring0)
- Add BuildRequires: system-user-daemon for the testsuite</changelog>
  <changelog author="hendrikw@arcor.de" date="1492430400">- reenable full Larg File Support for i586</changelog>
  <changelog author="jengelh@inai.de" date="1492948800">- Remove --with-pic that's just for static libraries.
- Replace %__-type macro indirections.
  Replace old $RPM_ by their macro equivalents for consistency.
  Make the macro style consistent across the file again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- BuildRequires gettext-tools-mini instead of gettext-tools: as
  acl is part of the bootstrap, we want to try to keep the dep
  chain as small as possible.</changelog>
  <changelog author="coolo@suse.com" date="1506254400">- refresh acl-2.2.52-tests.patch to work with perl 5.26</changelog>
  <changelog author="jeffm@suse.com" date="1539259200">- test: Add helper library to fake passwd/group files
- quote: escape literal backslashes (bsc#953659).
- Added patch:
  * 0001-test-Add-helper-library-to-fake-passwd-group-files.patch
  * 0002-quote-escape-literal-backslashes.patch</changelog>
</package>
<package pkgid="1dd6c5a56d6067db9f76e78dd7890aa745e83fb21d82eac93e27788d93bbce35" name="libaio1" arch="x86_64">
  <version epoch="0" ver="0.3.109" rel="1.25"/>
  <changelog author="adrian@suse.de" date="1317384000">- drop debian arm hack to fix build on arm ;)</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="ro@suse.de" date="1322481600">- fix lib64 platform check</changelog>
  <changelog author="jengelh@medozas.de" date="1322481601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Employ shlib packaging</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mvyskocil@suse.cz" date="1329393600">- fix typo versoin/version</changelog>
  <changelog author="coolo@suse.com" date="1329480000">- fix baselibs.conf after shlib split</changelog>
  <changelog author="dmueller@suse.com" date="1362139200">- Add libaio-aarch64-support.diff:
  * add support for aarch64
- Add libaio-generic-arch.diff:
  * support all archtes (also aarch64)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes/provides to baselibs.conf (bsc#881698)</changelog>
  <changelog author="meissner@suse.com" date="1460894400">- libaio-optflags.diff: readd -stdlib to allow -fstack-protector-strong
  builds (unclear why it was not allowed)
- 01_link_libgcc.patch, 02_libdevdir.patch: refreshed</changelog>
</package>
<package pkgid="95d3783980b94a1e007c8fdc279e2a745d21e6a0cd24cc8fbf970dc3479ebbed" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="150300.3.11.1"/>
  <changelog author="suse-beta@cboltz.de" date="1509451200">- update to AppArmor 2.11.95 aka 2.12 beta1
  - no changes in libapparmor
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_11_95
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1514203200">- update to AppArmor 2.12
  - preserve errno across aa_*_unref() functions
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.12
    for the detailed upstream changelog
- no longer package static libapparmor.a</changelog>
  <changelog author="suse-beta@cboltz.de" date="1523793600">- update to AppArmor 2.13
  - add support for multiple cache directories and cache overlays
    (boo#1069906, boo#1074429)
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1539518400">- update to AppArmor 2.13.1
  - several bug fixes
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1545393600">- update to AppArmor 2.13.2
  - no changes in libapparmor
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2
    for the detailed upstream changelog</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1560859200">- update to AppArmor 2.13.1
  - some fixes in cache handling
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1584014400">- update to AppArmor 2.13.4
  - fix log parsing for logs with an embedded newline
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602936000">- update to AppArmor 2.13.5
  - fix two potential build failures
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
    for the detailed upstream changelog
- add libapparmor-so-number.diff to fix libapparmor so version (!658)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1607515200">- update to AppArmor 2.13.6
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.6
    for the detailed upstream changelog
- drop upstreamed patch libapparmor-so-number.diff</changelog>
</package>
<package pkgid="f24744b77186c2bff1f5c134c972948022447d30590bba7af14f46cf72264eaa" name="libappindicator3-1" arch="x86_64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="1.12"/>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547380800">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
</package>
<package pkgid="2cd213874dddf4daf592e68d860accc89f9d65fb8ed2992c9f6a7943b0a3bf71" name="libargon2-1" arch="x86_64">
  <version epoch="0" ver="0.0+git20171227.670229c" rel="2.14"/>
  <changelog author="idonmez@suse.com" date="1482235200">- Initial release</changelog>
  <changelog author="hpj@urpla.net" date="1485604800">- make sure to call cc with -pthread option (implies -lpthread)
- run test suite</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- moved argon2-specs.pdf to doc subpackage
- added packaging of man page</changelog>
  <changelog author="meissner@suse.com" date="1492516800">- ship libargon2.pc (bsc#1034441)</changelog>
  <changelog author="lnussel@suse.de" date="1515499200">- Update to version 0.0+git20171227.670229c:
  * Added ABI version number
  * AVX2/AVX-512F optimizations of BLAMKA
  * Set Argon2 version number from the command line
  * New bindings
  * Minor bug and warning fixes (no security issue)
- use _service file</changelog>
  <changelog author="jengelh@inai.de" date="1515499201">- Update description.</changelog>
  <changelog author="lnussel@suse.de" date="1517313600">- add baselibs.conf as cryptsetup also has 32bit variants</changelog>
</package>
<package pkgid="66bf4d8c3bf4f95765a5f7d75cb25018d19f8a9d4f31b5177b5879afbcd824ba" name="libasm1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="4.5.3"/>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="jmoreira@suse.com" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="ec46dc0e3768ef57247769a65abaa083a2061283f1f1eab2442bed554a16983c" name="libasound2" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="3.13"/>
  <changelog author="tiwai@suse.de" date="1592568000">- Update to alsa-lib 1.2.3.1:
  a bug fix release, see the detailed changes at:
  https://www.alsa-project.org/wiki/Changes_v1.2.3_v1.2.3.1</changelog>
  <changelog author="tiwai@suse.de" date="1594296000">- Update to alsa-lib 1.2.3.2:
  another bug fix release: control namehint fixes, PCM dnsoop fixes,
  UCM regression fixes, etc.  See the details in
    https://www.alsa-project.org/wiki/Changes_v1.2.3.1_v1.2.3.2</changelog>
  <changelog author="tiwai@suse.de" date="1600862400">- Backport upstream fixes:
  0001-ucm-substitution-remove-duplicate-allow_empty-assign.patch
  0002-ucm-fix-parse_get_safe_name-safe-name-must-be-checke.patch
  0003-ucm-substitute-the-merged-tree-completely.patch
  0004-ctl-improve-documentation-for-identifier-of-control-.patch
  0005-pcm-dmix-make-lockless-operation-optional.patch
  0006-pcm-dmix-Fix-semaphore-usage-with-lockless-operation.patch
  0007-pcm-iec958-implement-HDMI-HBR-audio-formatting.patch
  0008-pcm-iec958-set-channel-status-bits-according-to-rate.patch
  0009-conf-pcm-USB-Added-S-PDIF-fix-for-Asus-Xonar-SE.patch
  0010-control-ctlparse-fix-enum-values-in-or.patch
  0011-conf-USB-Audio-Disable-IEC958-on-Lenovo-ThinkStation.patch
  0012-pcm-dmix-fix-access-to-sum-buffer-in-non-interleaved.patch
  0014-control-Add-documentation-for-snd_ctl_elem_list_.patch
  0015-conf-quote-also-strings-with-and-characters-in-strin.patch
  0016-topology-decode-Fix-channel-map-memory-allocation.patch
  0017-topology-decode-Fix-infinite-loop-in-decoding-enum-c.patch
  0018-topology-decode-Remove-decoding-values-for-enum-cont.patch
  0019-topology-decode-Add-enum-control-texts-as-separate-e.patch
  0020-topology-decode-Fix-printing-texts-section.patch
  0021-topology-decode-Change-declaration-of-enum-decoding-.patch
  0022-topology-decode-Fix-decoding-PCM-formats-and-rates.patch
  0023-topology-decode-Print-sig_bits-field-in-PCM-capabili.patch
  0024-topology-decode-Add-DAI-name-printing.patch
  0025-topology-Make-buffer-for-saving-dynamic-size.patch
  0026-topology-return-correct-value-in-tplg_save_printf.patch
  0027-topology-fix-some-gcc10-warnings-labs-signess.patch
  0028-topology-fix-sort_config.patch
  0029-topology-fix-the-unaligned-access.patch
  0030-topology-improve-the-printf-buffer-management.patch
  0031-control-Improve-general-control-interface-documentat.patch
  0032-control-Add-documentation-for-snd_ctl_elem_value_.patch
- Build topology library conditionally;
  currently it's supported only for little-endian</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1601380800">- Enable topology support for aarch64</changelog>
  <changelog author="schwab@suse.de" date="1601812800">- Enable topology support for riscv64</changelog>
  <changelog author="tiwai@suse.de" date="1601899200">- Placeholder for SLE15-SP3 sync (bsc#1171246):
  the actual fix is found in alsa-ucm-conf updates</changelog>
  <changelog author="tiwai@suse.de" date="1603281600">- Update to alsa-lib 1.2.4:
  Major updates, including previous patches.
  Documentation updates, PCM optional lockless, meter and iec958
  plugin updates, UCM updates, topology API updates, LTO fixes, etc.
  See the details in
    https://www.alsa-project.org/wiki/Changes_v1.2.3.2_v1.2.4
- Drop the superfluous udev rules for HD-audio;
  it's already handled in the kernel properly
- Drop obsoleted patches:
  0001-ucm-substitution-remove-duplicate-allow_empty-assign.patch
  0002-ucm-fix-parse_get_safe_name-safe-name-must-be-checke.patch
  0003-ucm-substitute-the-merged-tree-completely.patch
  0004-ctl-improve-documentation-for-identifier-of-control-.patch
  0005-pcm-dmix-make-lockless-operation-optional.patch
  0006-pcm-dmix-Fix-semaphore-usage-with-lockless-operation.patch
  0007-pcm-iec958-implement-HDMI-HBR-audio-formatting.patch
  0008-pcm-iec958-set-channel-status-bits-according-to-rate.patch
  0009-conf-pcm-USB-Added-S-PDIF-fix-for-Asus-Xonar-SE.patch
  0010-control-ctlparse-fix-enum-values-in-or.patch
  0011-conf-USB-Audio-Disable-IEC958-on-Lenovo-ThinkStation.patch
  0012-pcm-dmix-fix-access-to-sum-buffer-in-non-interleaved.patch
  0014-control-Add-documentation-for-snd_ctl_elem_list_.patch
  0015-conf-quote-also-strings-with-and-characters-in-strin.patch
  0016-topology-decode-Fix-channel-map-memory-allocation.patch
  0017-topology-decode-Fix-infinite-loop-in-decoding-enum-c.patch
  0018-topology-decode-Remove-decoding-values-for-enum-cont.patch
  0019-topology-decode-Add-enum-control-texts-as-separate-e.patch
  0020-topology-decode-Fix-printing-texts-section.patch
  0021-topology-decode-Change-declaration-of-enum-decoding-.patch
  0022-topology-decode-Fix-decoding-PCM-formats-and-rates.patch
  0023-topology-decode-Print-sig_bits-field-in-PCM-capabili.patch
  0024-topology-decode-Add-DAI-name-printing.patch
  0025-topology-Make-buffer-for-saving-dynamic-size.patch
  0026-topology-return-correct-value-in-tplg_save_printf.patch
  0027-topology-fix-some-gcc10-warnings-labs-signess.patch
  0028-topology-fix-sort_config.patch
  0029-topology-fix-the-unaligned-access.patch
  0030-topology-improve-the-printf-buffer-management.patch
  0031-control-Improve-general-control-interface-documentat.patch
  0032-control-Add-documentation-for-snd_ctl_elem_value_.patch</changelog>
  <changelog author="tiwai@suse.de" date="1609848000">- Backport upstream fixes:
  a PCM plugin regression fix about snd_pcm_status() call, plugin
  directory handling fixes, missing audio timestamp types,
  use-after-free fix for conf parser, PCM plugin delay account fixes,
  etc:
  0001-dlmisc-the-snd_plugin_dir_set-snd_plugin_dir-must-be.patch
  0002-dlmisc-fix-snd_plugin_dir-locking-for-not-DL_ORIGIN_.patch
  0003-pcm-snd_pcm_mmap_readi-fix-typo-in-comment.patch
  0007-pcm-set-the-snd_pcm_ioplug_status-tstamp-field.patch
  0009-pcm-Add-snd_pcm_audio_tstamp_type_t-constants.patch
  0010-test-audio_time-Make-use-of-SND_PCM_AUDIO_TSTAMP_TYP.patch
  0011-pcm-Fix-a-typo-in-SND_PCM_AUDIO_TSTAMP_TYPE_LAST-def.patch
  0012-conf-fix-use-after-free-in-_snd_config_load_with_inc.patch
  0013-ucm-fix-bad-frees-in-get_list0-and-get_list20.patch
  0014-rawmidi-fix-memory-leak-in-snd_rawmidi_virtual_open.patch
  0015-timer-fix-sizeof-operator-mismatch-in-snd_timer_quer.patch
  0016-pcm-remove-dead-assignments-from-snd_pcm_rate_-commi.patch
  0017-pcm_multi-remove-dead-assignment-from-_snd_pcm_multi.patch
  0018-conf-fix-get_hexachar-return-value.patch
  0019-pcm-fix-__snd_pcm_state-return-value.patch
  0020-confmisc-fix-memory-leak-in-snd_func_concat.patch
  0021-conf-fix-return-code-in-_snd_config_load_with_includ.patch
  0022-pcm-plugin-status-fix-the-return-value-regression.patch
  0023-pcm-plugin-status-revert-the-recent-changes.patch
  0024-pcm-plugin-tidy-snd_pcm_plugin_avail_update.patch
  0025-pcm-plugin-optimize-sync-in-snd_pcm_plugin_status.patch
  0026-Revert-pcm_plugin-fix-delay.patch
  0027-pcm-ioplug-fix-the-delay-calculation-in-the-status-c.patch
  0028-pcm-rate-tidy-up-snd_pcm_rate_avail_update.patch
  0029-pcm-ioplug-fix-the-delay-calculation-for-old-plugins.patch
  0030-pcm-rate-use-pcm_frame_diff-in-snd_pcm_rate_playback.patch
  0031-pcm-plugin-fix-status-code-for-capture.patch
  0032-pcm-rate-use-pcm_frame_diff-on-related-places.patch
  0033-pcm-rate-fix-the-capture-delay-values.patch</changelog>
  <changelog author="tiwai@suse.de" date="1611230400">- Backport upstream fixes:
  yet more PCM plugin fixes, topology fixes/cleanups, UAF fix in
  UCM (bsc#1181194):
  0004-topology-use-inclusive-language-for-bclk.patch
  0005-topology-use-inclusive-language-for-fsync.patch
  0006-topology-use-inclusive-language-in-documentation.patch
  0034-ucm-fix-possible-memory-leak-in-parse_verb_file.patch
  0035-topology-tplg_pprint_integer-fix-coverity-uninitaliz.patch
  0036-topology-tplg_add_widget_object-do-not-use-invalid-e.patch
  0037-topology-tplg_decode_pcm-add-missing-log-argument-co.patch
  0038-topology-parse_tuple_set-remove-dead-condition-code.patch
  0039-ucm-uc_mgr_substitute_tree-fix-use-after-free.patch
  0040-topology-sort_config-cleanups-use-goto-for-the-error.patch
  0041-conf-USB-add-Xonar-U7-MKII-to-USB-Audio.pcm.iec958_d.patch
  0042-pcm_plugin-set-the-initial-hw_ptr-appl_ptr-from-the-.patch
  0043-pcm-dmix-dshare-delay-calculation-fixes-and-cleanups.patch
  0044-topology-fix-parse_tuple_set-remove-dead-condition-c.patch</changelog>
  <changelog author="tiwai@suse.de" date="1611316800">- Yet more fixes for the crash with dmix plugin (bsc#1181194):
  0045-pcm-direct-Fix-the-missing-appl_ptr-update.patch
  0046-pcm-ioplug-Pass-appl_ptr-and-hw_ptr-in-snd_pcm_statu.patch
  0047-pcm-null-Pass-appl_ptr-and-hw_ptr-in-snd_pcm_status.patch
  0048-pcm-share-Pass-appl_ptr-and-hw_ptr-in-snd_pcm_status.patch</changelog>
</package>
<package pkgid="2b4e5216bc83ac9a7ae6e4a2532709d9b00bd5cd1b91c29ceb7902527eef3264" name="libassuan0" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="2.14"/>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="84ea0f0f6820680fc5a4ff5f39df56f3f842982815af16feae7a44d899a47c9a" name="libatk-1_0-0" arch="x86_64">
  <version epoch="0" ver="2.34.1" rel="1.56"/>
  <changelog author="bjorn.lie@gmail.com" date="1524657600">- Update to version 2.29.1:
  + Important note: this is the first release without autotools
    support. From now on only meson would be supported.
  + Bugfixing: Setting accessible-role does not work (bgo#794513).
  + Build, autotools: Remove autotools support (bgo#795315).
  + Build, meson:
  - Fix linker options on Darwin (bgo#795065).
  - Follow meson_options convention (bgo#795301).
  + Updated translations.
- Following upstream changes, pass docs=true and introspection=true
  to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529409600">- Update to version 2.29.2:
  + Add ScrollTo and ScrollToPoint methods to AtkComponent.
  + Build: Require a more recent version fo Meson, 0.46.0.
  + Misc: Documentation, introspection, and versioning fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 2.29.92:
  + Improve the documentation slightly.
- Use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.30.0:
  + Fix "atk 2.29.2 is reported not to work any more"
    (glgo#GNOME/atk#1).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550059200">- Update to version 2.31.90:
  + AtkText: Add ScrollSubstringTo and ScrollSubstringToPoint
    methods to AtkText.
  + Build - meson:
  - Make atk work as a subproject.
  - Use an autotools compatible
    compatibility_version/current_version on macOS.
  - Fix usage of glib as a subproject dependency.
  - Replace shared_library by library.
  + Build - Visual Studio: Add build instructions for Visual
    Studio, as now is done via Meson.
  + Documentation:
  - Move atk_relation_set_contains_target to correct doc section.
  - Improve documentation for AtkText method return values.
  + Misc: atkplug, atksocket: Fix -Wredundant-decls.
  + Updated translations.
- Add meson_test macro, run tests during build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 2.31.92:
  + By mistake, 2.31.90 re-introduced a bug, as master didn't have
    the revert for "atkimplementor: use the G_DEFINE_INTERFACE
    macro to declare it as interface in the introspection".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 2.32.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561464000">- Update to version 2.33.3:
  + Documentation: general documentation cleanup:
  - Move Deprecated section down on AtkUtil.
  - Update the list of symbols.
  - Annotate the version for AtkTableCellIface.
  - Use Markdown syntax for notes.
  - Use the appropriate syntax for enumerations.
  - Add missing documentation for AtkObject functions.
  - Write description for AtkImage method.
  - Add proper gtk-doc blurbs for AtkDocument, AtkComponentIface
    and AtkActionIface.
  - Remove atk.types (as we can autogenerate it).
  + AtkSocket/AtkPlug:  Implement proper constructor for AtkPlug
    and AtkSocket.
  + AtkText: Doc: minor doc fix for
    atk_text_get_default_attributes.
  + New Roles: Add ATK_ROLE_CONTENT_INSERTION and
    ATK_ROLE_CONTENT_DELETION.
  + Build:
  - Meson: do not guard gir behind a cross_build check.
  - Meson: refresh the build.
  - Meson: use Meson to generate the pkgconfig file.
  + Updated translations.
- Changes from version 2.33.2:
  + AtkObject: added accessible_id property.
  + AtkText
  - Edit documentation for last methods added in order to fix
    introspection
  - Fix failure value for atk_text_get_caret_offset.
  + Build: Bumping ATK version without a release as at-spi2-atk
    master started to depend on last API changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 2.34.0:
  + No changes provided by upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568289600">- Update to version 2.34.1:
  + Meson: fixed version.
- Update URL.</changelog>
</package>
<package pkgid="64127127c2b5a475598bdb856a78e450712b0d9a1e4d5a9a532d95e9916d8cf6" name="libatk-bridge-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.34.1" rel="1.56"/>
  <changelog author="bjorn.lie@gmail.com" date="1536321600">- Update to version 2.30.0:
  + No changes, stable bump only.</changelog>
  <changelog author="mgorse@suse.com" date="1551700800">- Update to version 2.30.1:
  + Fix crash retrieving table cell headers (bsc#1127792)..</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 2.31.2:
  + Add ScrollSubstringTo and ScrollSubstringToPoint interfaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787201">- Update to version 2.31.92:
  + Fix a crash when retrieveing headers from table cells.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552392000">- Update to version 3.32.0:
  + Stable release version bump.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561464000">- Update to version 2.33.2:
  + Add support for ROLE_CONTENT_DELETION and
    ROLE_CONTENT_INSERTION.
  + Fix a build issue where libgobject might not have been linked,
    resulting in undefined symbols.
- Changes from version 2.33.1:
  + Document atk_bridge_adaptor_init error messages.
  + Add atk_bridge_set_event_context.
  + Add AccessibleId property.</changelog>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 2.33.91:
  + Defer registration until the main loop is entered. This fixes
    an issue where a Python application could import gtk but not
    enter the main loop, resulting in the application registering
    with AT-SPI but not responding to queries.
  + Make sure return values are initialized for some functions.</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 2.33.92:
  + License is now lGPL-2.1+.
  + Several test fixes.
  + Initialize desktop name/path early; needed since we now defer
  registration.
- Set license to LGPL-2.1-or-later.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 2.34.0:
  + Updated doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 2.34.1:
  + socket_embed_hook: Make plug_id parameter const.</changelog>
</package>
<package pkgid="67b43e064a8c94262aa1a8e4211616b8b9a361e9e794cc5049e8c2e62445b98d" name="libatspi0" arch="x86_64">
  <version epoch="0" ver="2.34.0" rel="2.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 2.31.2:
  + Add ScrollSubstringTo and ScrollSubstringToPoint text
    interfaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551787201">- Update to version 2.31.92:
  + Fix atspi_table_cell_get_(row_column)_headers.
  + Update documentation to indicate that extents are only
    meaningful when an object has both STATE_VISIBLE and
    STATE_SHOWING.
  + Use a consistent style for the meson options.
  + Fix a compiler warning on BSD.
  + Add ScrollSubstringTo and ScrollSubstringToPoint text
    interfaces.
- Enable gtk-docs BuildRequires and update options passed to meson.
- Drop unneeded and unused intltool BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552392000">- Update to version 2.32.0:
  + Stable release version bump.</changelog>
  <changelog author="mgorse@suse.com" date="1552392001">- Add at-spi2-core-meson-build-fix.patch: fix build for meson
  0.50.0 (glgo#GNOME/at-spi2-core!9).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 2.32.1:
  + Fix meson build for meson 0.50.0 and newer.
- Drop at-spi2-core-meson-build-fix.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561464000">- Update to version 2.33.2:
  + Check WAYLAND_DISPLAY, rather than XDG_SESSION_TYPE, to avoid X
    connections. Fixes breakage if X is started with startx and
    XDG_SESSION_TYPE is unset.
  + X11: also try mod4 and mod5 to generate keysyms.
  + Add ATSPI_ROLE_CONTENT_DELETION and
    ATSPI_ROLE_CONTENT_INSERTION.
  + Check for dbus-daemon in /usr/lib (for Solaris).</changelog>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 2.33.90:
  + Refactor the API for the screen reader to notify listeners
    of its status.
  + Add a sender to the AtspiEvent struct.
  + Add missing atspi_application_get_type prototype.
  + Support mutter remote desktop interface for synthesizing
    keyboard/mouse events (likely still needs work).</changelog>
  <changelog author="mgorse@suse.com" date="1567425600">- Update to version 2.33.92:
  + Now requires meson 0.50.0.
  + License is now LGPL-2.1+.
  + Meson: only link to libdl when it is necessary.
  + Update installation instructions.
  + Clarify atspi_editable_text_insert_text documentation.
  + Do not warn on no reply from pending get_items call.
  + Eliminate some superfluous runtime warnings.
- Require meson &gt;= 0.50.0.
- Set license to LGPL-2.1-or-later.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 2.34.0:
  + Fix a use after free when freeing an event.
  + Clean up handling of the X11 property specifying the bus
    address.
  + Update doap.</changelog>
  <changelog author="mgorse@suse.com" date="1582804800">- Ad at-spi2-core-async-session-register.patch: make bus-launcher
  session registration more robust (boo#1154582).</changelog>
</package>
<package pkgid="69603fbcaab66c8ba3b5c0ae6fe255f969c4b3c3b6e31f0893b35a1261ee0fc4" name="libattr1" arch="x86_64">
  <version epoch="0" ver="2.4.47" rel="2.19"/>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Add config-guess-sub-update.patch:
  Update confg.guess/sub for aarch64</changelog>
  <changelog author="schwab@suse.de" date="1359806401">- Add attr-syscalls.patch:
  Define attr syscall numbers for aarch64</changelog>
  <changelog author="schwab@suse.de" date="1360065600">- Remove unused autoconf and automake build requires</changelog>
  <changelog author="mmeister@suse.com" date="1363780800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371384000">- Update to new upstream release 2.4.47
  * This release fixes two functional bugs related to tree walking
  and the return code from getfattr. Also, a number of build system
  problems were fixed.
- Remove config-guess-sub-update.patch (no longer applies),
  attr-syscalls.patch (resolved differently upstream),
  builddefs.in.diff (replaced by logic in specfile)
- Signature verification</changelog>
  <changelog author="coolo@suse.com" date="1371556800">- remove gpg-offline from bootstrap packages</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Reduce size of filelist by using wildcards;
  remove %doc (some locations are always %doc),
  remove %attr (files already have proper permissions)</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- remove man5/attr.5, it is now part of man-pages
  http://lwn.net/Articles/643559/</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="b91fd7eab110394ee32983614f2d1600e9e33964d32401a433026d927e0feddf" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="3.43"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.6.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
</package>
<package pkgid="7d343378461d45e97aa8eb3176febfe8dac861db66f11bd9926bdac64cafc421" name="libaugeas0" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jsikes@suse.com" date="1633435200">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1187512
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- support new chrony 4.1 options (jsc#SLE-17334)
  augeas-new_options_for_chrony.patch</changelog>
</package>
<package pkgid="0795a753ce8e2aa6c1c7ee35d7cdede2c0954af464cd399e65f6d3f3cc78b247" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="3.43"/>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.6.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
</package>
<package pkgid="ec841a10e475e34b924abaa2a275a2b5a64f47b51f3f9bc199cbd9b47807030f" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.7" rel="3.18.1"/>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="mgorse@suse.com" date="1642161600">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1644235200">- Have python3-avahi require python3-dbus-python, not the
  python 2 dbus-1-python package (bsc#1195614).</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="mgorse@suse.com" date="1645704000">- Downgrade python3-Twisted to a Recommends. It is not available
  on SLED or PackageHub, and it is only needed by avahi-bookmarks
  (bsc#1196282).
- Add avahi-bookmarks-import-warning.patch: fix warning when
  twisted is not available.</changelog>
</package>
<package pkgid="c591a7cec9020fecd7942a43c7e01a1a257286389384e64821b2377b4eb5e239" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.7" rel="3.18.1"/>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="mgorse@suse.com" date="1642161600">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1644235200">- Have python3-avahi require python3-dbus-python, not the
  python 2 dbus-1-python package (bsc#1195614).</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="mgorse@suse.com" date="1645704000">- Downgrade python3-Twisted to a Recommends. It is not available
  on SLED or PackageHub, and it is only needed by avahi-bookmarks
  (bsc#1196282).
- Add avahi-bookmarks-import-warning.patch: fix warning when
  twisted is not available.</changelog>
</package>
<package pkgid="da45da0d8171d0fbc46857c19454cd7ad5efc8ecd52c87fee4bfafc605a8792d" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.7" rel="3.18.1"/>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="mgorse@suse.com" date="1642161600">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1644235200">- Have python3-avahi require python3-dbus-python, not the
  python 2 dbus-1-python package (bsc#1195614).</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="mgorse@suse.com" date="1645704000">- Downgrade python3-Twisted to a Recommends. It is not available
  on SLED or PackageHub, and it is only needed by avahi-bookmarks
  (bsc#1196282).
- Add avahi-bookmarks-import-warning.patch: fix warning when
  twisted is not available.</changelog>
</package>
<package pkgid="7f31d529a4c379e66736bc985a9f32750b282e546cc218ce1a2256aaa142dbd2" name="libbasicobjects0" arch="x86_64">
  <version epoch="0" ver="0.1.1" rel="3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="scabrero@suse.de" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="f68bf203280dd79a794fb3cda465a6cf64bd10dfb0aeaa8bff0d578f264b2adf" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="0c47078d7ef879bfe4797a4fdc9d8b7ea59a50759c0eebb0ff2e97c449b4948c" name="libblogger2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150300.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
</package>
<package pkgid="72cb19218c21a51eb821d831d91c6d9a2f511c315b23526433b9abc54f164583" name="libboost_system1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="12.3.1"/>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
</package>
<package pkgid="3d1462a4850c16f2ace842470e7fc2c17fa4fca5f6c16e79a6ca768e3bab9495" name="libboost_thread1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="12.3.1"/>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
</package>
<package pkgid="81ca2153a95c58223fd81e6cad6626c8a240370a8820f8928673719c24639cd6" name="libbrotlicommon1" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="978538235cb1d746f7404689972c4e552eac2ba209a1a531c0551c2032bce791" name="libbrotlidec1" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="c467218a2ba03ba9b3fa11e5e953738d6cf7b0506621bc2434d60213469b8715" name="libbsd0" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="3.3.17"/>
  <changelog author="jengelh@inai.de" date="1346932800">- Avoid unnecessary complex install line on Redhatish
- Compact file list, add helpful URLs to specfile</changelog>
  <changelog author="dhall@wustl.edu" date="1414670400">- update to version 0.7.0</changelog>
  <changelog author="mpluskal@suse.com" date="1431086400">- Add gpg signature
- Use fdupes to remove duplicate files
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1449662400">- Update to 0.8.0
  * See attached ChangeLog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 0.8.1
  * Use local SHA512 header
  * Unify most arc4random Unix hooks into a single file
  * Add support for GNU/kFreeBSD for closefrom() and getentropy()
  * Fix getentropy implementation to use the correct system hooks
  * Add missing copyright and license headers
  * Relicense my contribution to BSD-2-clause
  * Switch COPYING to Debian copyright machine readable format 1.0
  * Use the non-overlayed libbsd headers when we need our own definitions
  * Add missing include to &lt;md5.h&gt;
  * Turn &lt;bsd/bsd.h&gt; inert when using LIBBSD_OVERLAY
  * test: Add new unit tests for individual headers usage
  * Add support for GNU/Hurd to getentropy()</changelog>
  <changelog author="idonmez@suse.com" date="1451304000">- Split static library into libbsd-ctor-static package.</changelog>
  <changelog author="mpluskal@suse.com" date="1463486400">- Update to version 0.8.3:
  * Fix unportable sizeof() usage
  * Fix file descriptor leak in HASHFileChunk helper
  * Switch URLs from http or git to https
  * build: Support clock_gettime() provided in librt
  * man: Fix ungrammatical construct
  * test: Add a unit test for md5
  * Add missing &lt;fcntl.h&gt; includes
- Changes for 0.8.2:
  * test: Fix success return code for arc4random unit test
  * test: Add missing &lt;sys/stat.h&gt; include
  * Fix heap buffer overflow in fgetwln()
  * test: Fix race condition in headers-*.sh
- Enable internal tests
- Use correct package categories</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to version 0.8.6:
  * test:
    + Fix nlist() unit test on IA64 and PowerPC 64-bit ELFv1
  * Fix handling of non-contiguous argv + envp in setproctitle()
- Changes for version 0.8.5:
  * test:
    + Handle libtool executable names in getprogname() unit test
    + Remove unused variable in nlist() unit test
  * man:
    + Ship and install libbsd(7)
    + Update man page sections in titles and references
  * Fix ELF definitions for PowerPC in local-elf.h
  * Fix ELF definitions for MIPS in local-elf.h
- Changes for version 0.8.4:
  * Add support for RISC-V
  * Support GCC deprecated attribute for GCC older than 4.5
  * Fix the __progname check to avoid the optimizer discarding the symbol
  * Gracefully handle lack of system &lt;sys/cdefs.h&gt;
  * Do not provide funopen() on musl
  * Try &lt;linux/a.out.h&gt; if &lt;a.out.h&gt; is not present
  * Do not use legacy BSD u_* types
  * Import &lt;sys/time.h&gt; for some of its macros</changelog>
  <changelog author="avindra@opensuse.org" date="1516795200">- Update to version 0.8.7:
  * Fix &lt;sys/cdefs.h&gt; for gcc with no __has_include or
    __has_include_next support
  * man: Document on what other BSDs arc4random(3) is present
  * Handle several functions now being provided by glibc
  * test: Fix nlist(3) unit test on IA64
- switch to mirror temporarily, per announce:
  https://lists.freedesktop.org/archives/libbsd/2018-January/000166.html</changelog>
  <changelog author="mvetter@suse.com" date="1578916800">- bsc#1160551 (CVE-2019-20367):
  Fix out-of-bounds read during a comparison for a symbol name
  from the string table.
- Add libbsd-0.8.7-CVE-2019-20367.patch</changelog>
</package>
<package pkgid="b7b10eaa8361935279f040c4e228bbb743e3fc04f86e6763e3e7cf3fde2c1ec5" name="libbtrfs0" arch="x86_64">
  <version epoch="0" ver="4.19.1" rel="16.1"/>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="mfasheh@suse.com" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="rgoldwyn@suse.com" date="1607601600">- Enqueue feature to wait for exclusive operation to finish
  (JSC#SLE-15234)
- Added patches:
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1609848000">- Refresh manual pages after the docs change (jsc#SLE-13586)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1617969600">- Correct check_running_fs_exclop() return value (bsc#1184481)
  btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
</package>
<package pkgid="ee0339e3cd052ac94ea922874af0fe8a510f5b42311d1c2e5856257cd6d744bd" name="libbz2-1" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="5.11.1"/>
  <changelog author="kstreitova@suse.com" date="1458820800">- add bzip2-1.0.6-bzgrep_return_value.patch to fix bzgrep wrapper
  that always returns 0 as an exit code when grepping multiple
  archives [bsc#970260]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Drop implicit pie building
- Try profiled build
- Move autoreconf to build section</changelog>
  <changelog author="sbrabec@suse.com" date="1509451200">- Update bzip2-1.0.6-autoconfiscated.patch:
  * Bump version to 1.0.6.
  * Fix script symlinks on platforms with EXEEXT.</changelog>
  <changelog author="bwiedemann@suse.com" date="1509796800">- Fix build on Fedora and Mageia</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Update autotools patchset:
  D bzip2-1.0.6-autoconfiscated.patch
  A bzip2-1.0.6.2-autoconfiscated.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1555588800">- add bzip2-1.0.6-CVE-2016-3189.patch to fix a heap use after
  free vulnerability that was reported in bzip2recover [bsc#985657]
  [CVE-2016-3189]</changelog>
  <changelog author="kstreitova@suse.com" date="1562587200">- add bzip2-1.0.6-CVE-2019-12900.patch to fix an out-of-bounds
  write in decompress.c when there are many nSelectors used in a
  loop to access selectorMtf [bsc#1139083] [CVE-2019-12900]</changelog>
  <changelog author="kstreitova@suse.com" date="1563969600">- update bzip2-1.0.6-CVE-2019-12900.patch to accept as many
  selectors as the file format allows. This relaxes the previous
  fix for CVE-2019-12900 so that bzip2 allows decompression of bz2
  files that use (too) many selectors again. It fixes a bzip2 and
  lbzip2 incompatibility caused by previous patch [bsc#1139083]
  [CVE-2019-12900]</changelog>
</package>
<package pkgid="bc4699205377d9d9451291680eadc3505114f850d77355e656a37a5306ae3e00" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="5.2.1"/>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="25a8cbdea907c1019eb5033c5ef9939fbd0baac31faff6f5b0bec0f12efed26f" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="5.2.1"/>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
</package>
<package pkgid="e46eef0b24314eedb2cf0f1a1bbf808714a409ccf49c0726a9a98b772badcbe6" name="libcap-ng0" arch="x86_64">
  <version epoch="0" ver="0.7.9" rel="4.37"/>
  <changelog author="crrodriguez@opensuse.org" date="1363176000">- version 0.7.3
- Make file opens use the cloexec flag (Cristian Rodríguez)
- Add CAP_BLOCK_SUSPEND
- Fix possible segfaults when CAP_LAST_CAP is larger than the lookup table
- In pscap, don't drop capabilities when running with capabilities
- Add CAP_COMPROMISE_KERNEL
- Define FTW_CONTINUE in case its not defined in libc
- Use glibc for xattr.h if available
- Make sure stderr is used consistently in utils
- Fix logic causing file based capabilities to not be supported when it should</changelog>
  <changelog author="meissner@suse.com" date="1363262400">- use source url</changelog>
  <changelog author="tchvatal@suse.com" date="1400155200">- Version bupm to 0.7.4
- Cleanup with spec-cleaner
- Remove useless specification of attributes
- Really split the two spec files instead of copying them to avoid
  the huge ifdefing.
  + more readable
  - version must be edited in two places when bumping</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1403179200">- Remove unused BuildRequires on libattr-devel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.7.7
  * Make sure all types used in _lnode are defined in proc-llist.h
  * Fix python binding test for old kernels
  * Fix leaked FD in library init
- Changes from version 0.7.6
  * Fix python3 support
- Changes from version 0.7.5
  * Make python3 supported
  * In python bindings test, clamp CAP_LAST_CAP with /proc/.../cap_last_cap
  * Update table for 3.16 kernel</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1495022400">- Update to version 0.7.8:
  * Improve Python3 support
  * Fix the thread separation test
  * Correct typo in cap_pacct text
  * Update man page for captest
  * Fix sscanf string lengths in netcap
  * Correct linking of python3 module</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 0.7.9:
  * Detect and output a couple errors in filecap
  * Use pthread_atfork to optionally reset the pid and related info
    on fork
- cleanup with spec-cleaner
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1518955201">- Remove ineffective --with-pic. Fix SRPM group. Redo descriptions.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Move %doc to %license for licenses</changelog>
  <changelog author="mcepl@suse.com" date="1526472000">- Just fixing the License field</changelog>
</package>
<package pkgid="12b5bb7bb5d4f4edab96c6e390edff10a918b4521690f9a667ae7824eb05bf5f" name="libcap2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="4.6.1"/>
  <changelog author="aj@suse.de" date="1316520000">- Cleanup specfile a bit: Remove old tags.</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1403179200">- libcap-nolibattr.patch Do not link to libattr, it is
  a bogus dependency. application uses sys/xattr from libc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 2.24
  * Fix compilation problems (note to self, make distclean &amp;&amp; make,
    before release)
  * Some make rule changes to make uploading a release to kernel.org
    easier for me.
  * Tidied up some documented links.
- Update libcap-nolibattr.patch
- Add pkg-config build requirement; libcap now provides a pkgconfig
  file
- Clean up specfile
- Move libraries and binaries to /usr because of #UsrMove</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to versison 2.25:
  + Recover gperf detection in make rules.
  + Man page typo fix.
  + Tweak make rules to make packaging more straightforward.
  + Fix error explanation in setcap.
  + Drop need to link with libattr. It turns out libcap wasn't
    actually using any code from that library, so linking to it was
    superfluous.
- Drop libcap-nolibattr.patch: fixed upstream.
- No longer add %{buildroot} to all variables for make install the
  Makefile learned about the meaning of DESTDIR.</changelog>
  <changelog author="jengelh@inai.de" date="1483272000">- RPM group association fix</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1485864000">- Enable PAM pam_cap.so module</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tiwai@suse.de" date="1615291200">- Update to libcap 2.26 for supporting the ambient capabilities
  (jsc#SLE-17092, jsc#ECO-3460)
- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  and pam_cap (bsc#1184690)</changelog>
</package>
<package pkgid="40d28b8b0bbf2aa7c017bef0f9a5e2aee4269c0bcfde88f8af4cb3f053d7864a" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.17.1+20200724" rel="3.17.1"/>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="adam.majer@suse.de" date="1628251200">- Version update to git snapshot 1.17.1+20200724:
  * fixes missing input validation on hostnames returned by DNS
    servers (bsc#1188881, CVE-2021-3672)
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as
    per RFC1035 5.1 to prevent spoofing
  * Use unbuffered /dev/urandom for random data to prevent early startup
    performance issues
- missing_header.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
</package>
<package pkgid="09cb4ac30b0d0f79f1258f9a54633e8389a2e1d7bac716d9d03a98d84f0d3b40" name="libcbor0" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="4.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
</package>
<package pkgid="d2adc82c6d82573470759dd317321fd20e9cc98ddb15515a365f3d8dac2459b5" name="libcdda_interface0" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="1.28"/>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="nadvornik@suse.cz" date="1235649600">- updated to III-10.2
  * many patches merged upstream
- adapted according to shared library policy
  * new subpackage libcdda_interface0
  * new subpackage libcdda_paranoia0
  * new subpackage cdparanoia-devel
- added debian patches
  cdparanoia-III-01-typos-and-spelling.dpatch
  cdparanoia-III-05-gcc4.3.dpatch
  cdparanoia-III-06-endian.dpatch</changelog>
  <changelog author="vuntz@novell.com" date="1249473600">- Make the devel package require libcdda_interface0 and
  libcdda_paranoia0 instead of cdparanoia.</changelog>
  <changelog author="jengelh@medozas.de" date="1262865600">- Add baselibs.conf as a source
- Switch from -fpic to -fPIC, at least SPARC needs this</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fixes: use %configure macro, set bindir and include
  dir explicitly when installing</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
</package>
<package pkgid="5c214c5af575c7672953f60c9cd761e97421bdb4bb14a796088ab30c94d55f8e" name="libcdda_paranoia0" arch="x86_64">
  <version epoch="0" ver="3.10.2" rel="1.28"/>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="nadvornik@suse.cz" date="1235649600">- updated to III-10.2
  * many patches merged upstream
- adapted according to shared library policy
  * new subpackage libcdda_interface0
  * new subpackage libcdda_paranoia0
  * new subpackage cdparanoia-devel
- added debian patches
  cdparanoia-III-01-typos-and-spelling.dpatch
  cdparanoia-III-05-gcc4.3.dpatch
  cdparanoia-III-06-endian.dpatch</changelog>
  <changelog author="vuntz@novell.com" date="1249473600">- Make the devel package require libcdda_interface0 and
  libcdda_paranoia0 instead of cdparanoia.</changelog>
  <changelog author="jengelh@medozas.de" date="1262865600">- Add baselibs.conf as a source
- Switch from -fpic to -fPIC, at least SPARC needs this</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fixes: use %configure macro, set bindir and include
  dir explicitly when installing</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="coolo@suse.com" date="1342353600">- own directories for japanese man pages, no need to buildrequire man
  for that</changelog>
  <changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1369137600">- add config-guess-sub-update.diff:
  * configure.guess/sub update for aarch64 support</changelog>
  <changelog author="tchvatal@suse.com" date="1382616000">- Redo the buildsystem to use only shared libs and allow parallel
  building to have it faster in obs.
  * removed patches:
  - cdparanoia-III-dt_needed.patch
  - cdparanoia-large-pic.diff
  * added patches:
  - 010_build_system.patch
  - 050_all_build_only_shared_libraries.patch</changelog>
</package>
<package pkgid="971e72d1bc0ef33ed8f6ae346e82d2d531ac76f42434587e54e392e82f5d61f1" name="libcollection4" arch="x86_64">
  <version epoch="0" ver="0.7.0" rel="3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="scabrero@suse.de" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="95b0105e8914c5bddb1b037bef61c00729795239514859bb56f56bb398e56189" name="libcolord2" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="092c0a5f4901a04ec7363e4a731ebc6da4f7c3e298a5d70ffcd5fae9f1865fab" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="4.26.1"/>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="jack@suse.cz" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="jack@suse.cz" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="jack@suse.cz" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="jack@suse.cz" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="9b73a92c8a65be664e08f4abda06f64ac1242dc4228b7b8059333f7e0b96cb5d" name="libconfig11" arch="x86_64">
  <version epoch="0" ver="1.7" rel="2.12"/>
  <changelog author="saschpe@suse.de" date="1331553600">- Fixed changes file markup</changelog>
  <changelog author="saschpe@suse.de" date="1331726400">- Fix typo, it's %{_smp_mflags}
- Remove unwanted description paragraphs</changelog>
  <changelog author="davejplater@gmail.com" date="1337428800">- Added baselibs.conf for 32 bit ffado
- Disabled pdf and html docs, moved info to devel package</changelog>
  <changelog author="p.drouand@gmail.com" date="1356782400">- Update to 1.4.9 version:
  * lib/libconfigcpp.c++ - Fixed compiler warnings in constructor
    initializers
  * tinytest/tiytest.c, tinytest/tinytest.h - added tt_file_exists();
    added alternate implementations of some test macros since MSVC does
    not support C99 fully; added comparators for text files (ignoring
    line endings)
  * tests/tests.c - use tt_file_exists() rather than access(); alias
    snprintf to _snprintf for MSVC; compare files as text files rather
    than as binary files
  * lib/scanner.l - fixed parsing issue when backslash in string is
    followed by invalid escape character; reported by Jimmy Scott
  * lib/scanner.c - regenerated
  * lib/libconfig.h, lib/libconfig.h++, lib/Makefile.am,
    doc/libconfig.texi, configure.ac - bump version numbers
  * aclocal.m4, ac_config.h - regenerated
  * m4/*, aux-build/*, libtool - updated to newer</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Make doc subpackage noarch; improve on RPM group classification</changelog>
  <changelog author="i@marguerite.su" date="1433678400">- update version 1.5.0
  * lib/libconfig.c - Don't fclose() a null pointer.
  * lib/libconfig.c, lib/wincompat.h - check if file being
    opened is a directory
  * lib/libconfig.c, lib/libconfig.h, lib/libconfig.h++,
    doc/libconfig.texi - added config_set_options(),
    config_get_options(), setOptions(), getOptions().
  * lib/libconfig.c++, lib/libconfig.h++ - added patches
    from Matt Renaud (added iterators, removed throws()
    specifications); added Setting.lookup(); code cleanup;
    added patch from Yuri Dyachenko (made exception
    constructors public)
  * lib/libconfig.c, lib/libconfig.h - renamed
    config_setting_lookup_from() to config_setting_lookup()
    and documented it; patch from Alexander Klauer (floating
    point precision loss)
  * doc/libconfig.texi - documented new APIs, bumped version
  * lib/scanner.c, lib/scanner.h, lib/scanner.l, libconfig.c -
    scanner code cleanup; and regenerated with flex 2.5.39
  * lib/grammar.c, lib/grammar.h, lib/grammar.y - parser code
    cleanup; and regenerated with bison 3.0.2
  * lib/libconfig.c - bugfix; capture root filename
  * tests/Makefile.am - fix for out-of-source builds
  * ac_config.h.in, aclocal.m4 - updated to newer autotools</changelog>
  <changelog author="tchvatal@suse.com" date="1499947200">- Update to 1.6.0:
  * Added include_dir feature (support for Debian-style conf.d/
    includes) (pull request #36)
  * Added octal_ints feature (support for integer expressed in octal,
    useful for permissions and masks in UNIX-like systems (pull req #42)
  * Fixed "Removing a setting removes all siblings" (issue #41)
    Props random85
  * Allow specifying the number of decimals wanted when outputting
    Based upon a suggestion by zhaopingsun (issue #31)
  * Make libconfig usable from CMake (pull request/issue #28)
    Props thfi
  * Documentation fixes
  - Copyright and examples
  - Included TeX patch from Debian (fixes FTBS with TeXlive)
  * Resync Debian packaging
    includes updated packages for GCC5 transition</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 1.7:
  * Redesigned the directory-include feature to avoid using
    platform-specific directory scanning code, and to fix a bug in
    the handling of nested includes. The application can now do its
    own directory scanning and/or wildcard expansion by registering
    an include function.
  * Added new CONFIG_OPTION_ALLOW_SCIENTIFIC_NOTATION to allow
    either %f or %g-style formatting for floating point values.
  * Improved the options APIs in both the C and C++ libraries.
  * Improved the automatic conversion between int and int64 values.
  * Fixed build errors caused by out-of-sync generated lexer and
    parser source files.
  * Added an API to clear an existing configuration.
  * Fixed a problem where a group or list could be added to an array.
  * Changed default float precision from 2 to 6.
  * Modified grammar to allow trailing commas in lists and arrays.
  * Removed logic that clipped negative values to 0 in (unsigned int)
    cast operator.
  * Updated manual and added a new chapter on other libconfig
    implementations and bindings.
  * Various internal code cleanup.
  * Fixed failing unit tests.
  * Upgraded VS2015 solution/project files to VS2017.
- Use new project URL
- sonum updated from 8 to 11</changelog>
  <changelog author="jengelh@inai.de" date="1518004800">- Ensure neutrality of description, and strip other OS mentions.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="a1d4f0b7ea4dd2fb1ed373646701efb0a84994d4f551ad432b80fb43f00e9cb1" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20210626" rel="150300.8.3.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1618833600">- Update common to 0.36.0
  0.36.0:
  no changelog found
  0.35.4:
    pkg/seccomp: simplify and fix IsSupported
    pkg/seccomp: use sync.Once to speed up IsSupported
    capabilities: ALL returns the bounding set
    capabilities: memoize BoundingSet
    capabilities: add new method BoundingSet()
    Update pause image to 3.5
- Update podman to 3.1.1
  3.1.1:
  [#]## Changes
- Podman now recognizes `trace` as a valid argument to the `--log-level` command. Trace logging is now the most verbose level of logging available.
- The `:z` and `:Z` options for volume mounts are now ignored when the container is privileged or is run with SELinux isolation disabled (`--security-opt label=disable`). This matches better matches Docker's behavior in this case.
  [#]## Bugfixes
- Fixed a bug where pruning images with the `podman image prune` or `podman system prune` commands could cause Podman to panic.
- Fixed a bug where the `podman save` command did not properly error when the `--compress` flag was used with incompatible format types.
- Fixed a bug where the `--security-opt` and `--ulimit` options to the remote Podman client's `podman build` command were nonfunctional.
- Fixed a bug where the `--log-rusage` option to the remote Podman client's `podman build` command was nonfunctional ([#9489](https://github.com/containers/podman/issues/9889)).
- Fixed a bug where the `podman build` command could, in some circumstances, use the wrong OCI runtime ([#9459](https://github.com/containers/podman/issues/9459)).
- Fixed a bug where the remote Podman client's `podman build` command could return 0 despite failing ([#10029](https://github.com/containers/podman/issues/10029)).
- Fixed a bug where the `podman container runlabel` command did not properly expand the `IMAGE` and `NAME` variables in the label ([#9405](https://github.com/containers/podman/issues/9405)).
- Fixed a bug where poststop OCI hooks would be executed twice on containers started with the `--rm` argument ([#9983](https://github.com/containers/podman/issues/9983)).
- Fixed a bug where rootless Podman could fail to launch containers on cgroups v2 systems when the `cgroupfs` cgroup manager was in use.
- Fixed a bug where the `podman stats` command could error when statistics tracked exceeded the maximum size of a 32-bit signed integer ([#9979](https://github.com/containers/podman/issues/9979)).
- Fixed a bug where rootless Podman containers run with `--userns=keepid` (without a `--user` flag in addition) would grant exec sessions run in them too many capabilities ([#9919](https://github.com/containers/podman/issues/9919)).
- Fixed a bug where the `--authfile` option to `podman build` did not validate that the path given existed ([#9572](https://github.com/containers/podman/issues/9572)).
- Fixed a bug where the `--storage-opt` option to Podman was appending to, instead of overriding (as is documented), the default storage options.
- Fixed a bug where the `podman system service` connection did not function properly when run in a socket-activated systemd unit file as a non-root user.
- Fixed a bug where the `--network` option to the `podman play kube` command of the remote Podman client was being ignored ([#9698](https://github.com/containers/podman/issues/9698)).
- Fixed a bug where the `--log-driver` option to the `podman play kube` command was nonfunctional ([#10015](https://github.com/containers/podman/issues/10015)).
  [#]## API
- Fixed a bug where the Libpod Create endpoint for Manifests did not properly validate the image the manifest was being created with.
- Fixed a bug where the Libpod DF endpoint could, in error cases, append an extra null to the JSON response, causing decode errors.
- Fixed a bug where the Libpod and Compat Top endpoint for Containers would return process names that included extra whitespace.
- Fixed a bug where the Compat Prune endpoint for Containers accepted too many types of filter.
  [#]## Misc
- Updated Buildah to v1.20.1
- Updated the containers/storage library to v1.29.0
- Updated the containers/image library to v5.11.0
- Updated the containers/common library to v0.36.0
- Update storage to 1.29.0
  1.29.0:
    ReloadConfigurationFile should Reset storage options
    rootless overlay: use user.* instead of trusted.*
    build(deps): bump github.com/Microsoft/hcsshim from 0.8.15 to 0.8.16
    Support additional layer store
    overlay, rootless: use user.* instead of trusted.*
    archive, rootless: use user.* instead of trusted.*
    copy, rootless: skip copying trusted.* xattr
    Make sure rootless mounts support the userxattr flag
    Rework autons ID mapping generation.
    Set default to overlay from storage.conf
    build(deps): bump github.com/klauspost/compress from 1.11.12 to 1.11.13
- Update image to 5.11.0
  * no changelog found</changelog>
  <changelog author="rbrown@suse.com" date="1618833601">- Force overlay as default storage driver if system is not btrfs
  (gh#containers/buildah#3153)</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1619697600">- Update common to 0.37.0
  0.37.0:
    new libimage package
    Bump github.com/containers/storage from 1.29.0 to 1.30.0
    config: suggest enable-linger only if euid != 0
    Change log message in findRuntime()
    Add setns to default seccomp.json
    Cleanup debugf information to make debugging more useful
- Update podman to 3.1.2
  3.1.2:
  [#]## Bugfixes
- Fixed a bug where images with empty layers were stored incorrectly, causing them to be unable to be pushed or saved.
- Fixed a bug where the `podman rmi` command could fail to remove corrupt images from storage.
- Fixed a bug where the remote Podman client's `podman save` command did not support the `oci-dir` and `docker-dir` formats ([#9742](https://github.com/containers/podman/issues/9742)).
- Fixed a bug where volume mounts from `podman play kube` created with a trailing `/` in the container path were were not properly superceding named volumes from the image ([#9618](https://github.com/containers/podman/issues/9618)).
- Fixed a bug where Podman could fail to build on 32-bit architectures.
  [#]## Misc
- Updated the containers/image library to v5.11.1
- Update storage to 1.30.1
  1.30.1:
    Allow users to tag images in read/only image stores
    build(deps): bump github.com/klauspost/compress from 1.12.1 to 1.12.2
    Validate selinux label before attempting to use it
  1.30.0:
    unshare: new function HasCapSysAdmin
    btrfs: Do not disable quota on cleanup
    build(deps): bump github.com/klauspost/compress from 1.11.13 to 1.12.1
- Update image to 5.11.1
  * new libimage package
  * Bump github.com/containers/storage from 1.29.0 to 1.30.0
  * config: suggest enable-linger only if euid != 0
  * Change log message in findRuntime()
  * Add setns to default seccomp.json
  * Cleanup debugf information to make debugging more useful</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621339200">- Update image to 5.12.0
  v0.38.2:
  * libimage: add save tests
  * libimage/Image.HasDifferentDigest: handle manifest lists
  * libimage: push: ignore image platform
  * Cirrus: Use config. in common with all repos.
  * libimage: add import test
  * Fix handling of all capabilities
  * libimage: add save tests
  * containers.conf: don't set default logging driver
  v0.38.1:
  * libimage: add save tests
  * libimage/Image.HasDifferentDigest: handle manifest lists
  * libimage: push: ignore image platform
  * Cirrus: Use config. in common with all repos.
  * libimage: add import test
  * Fix handling of all capabilities
  * libimage: add save tests
  * containers.conf: don't set default logging driver
  v0.38.1:
  * adjust log-driver defaults
  * Do not emit warnings about OCI runtime paths
  * build(deps): bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
  * build(deps): bump github.com/containers/storage from 1.30.1 to 1.30.3
  * [NO TESTS NEEDED] Fix reading configs on mac and windows
  * libimage: add push tests
  * build(deps): bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * libimage: fix pull from dir
  * libimage: add load unit tests
  * Only close EventChannel if it has been created.
  v0.38:
  * build(deps): bump github.com/docker/docker
  * libimage: add an events system
  * libimage: add unit tests
  * libimage: rename dockerTransport to registryTransport
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * pull: simplify transports switch
  * Fix images tagged by 64 chars cannot be pulled when ommiting "docker://" prefix
  * Add support for codespell, and fix issues found
  * libimage: restore the ability to pull from docker-daemon and tarball
  * Swap default logging to journald
  * fix image tree
  * Add support for creating default CNI network
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * Add a default network creation package
  * Add ability to specify a subnet for the default network
  * libimage: follow-up changes
  v0.37.1:
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Add support for the runsc OCI Runtime
  * Add support for machine_enabled in containers.conf
  * modify README.md: Contributing section finetuning
  * Add support for image_parallel_copies in containers.conf
  * Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
- Update common to 0.38.2
  0.38.2:
    libimage: add save tests
    libimage/Image.HasDifferentDigest: handle manifest lists
    libimage: push: ignore image platform
    Cirrus: Use config. in common with all repos.
    libimage: add import test
    Fix handling of all capabilities
    libimage: add save tests
    containers.conf: don't set default logging driver
  0.38.1:
    adjust log-driver defaults
    Do not emit warnings about OCI runtime paths
    build(deps): bump github.com/opencontainers/selinux from 1.8.0 to 1.8.1
    build(deps): bump github.com/containers/storage from 1.30.1 to 1.30.3
    [NO TESTS NEEDED] Fix reading configs on mac and windows
    libimage: add push tests
    build(deps): bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
    libimage: fix pull from dir
    libimage: add load unit tests
    Only close EventChannel if it has been created.
  0.38.0:
    build(deps): bump github.com/docker/docker
    libimage: add an events system
    libimage: add unit tests
    libimage: rename dockerTransport to registryTransport
    Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
    pull: simplify transports switch
    Fix images tagged by 64 chars cannot be pulled when ommiting "docker://" prefix
    Add support for codespell, and fix issues found
    libimage: restore the ability to pull from docker-daemon and tarball
    Swap default logging to journald
    fix image tree
    Add support for creating default CNI network
    Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
    Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
    Add a default network creation package
    Add ability to specify a subnet for the default network
    libimage: follow-up changes
  0.37.1:
    Bump github.com/containers/storage from 1.30.0 to 1.30.1
    Add support for the runsc OCI Runtime
    Add support for machine_enabled in containers.conf
    modify README.md: Contributing section finetuning
    Add support for image_parallel_copies in containers.conf
    Bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
- Update storage to 1.31.0
  1.31.0:
    Update docs/containers-storage.conf.5.md
    store: add option to disable volatile
    build(deps): bump github.com/Microsoft/hcsshim from 0.8.16 to 0.8.17
    Enable zstd:chunked support in containers/image
    overlay: honor DisableShifting
    store: allow shifting only with contiguous mappings
    idtools: new function IsContiguous
    store: replace Modified+Load with ReloadIfChanged
    store: new method ROFileBasedStore.ReloadIfChanged()
    Expand the scope of transaction in the process of deleting device
    Remove unlock/lock caused by Incorrect assumption
  1.30.3:
    Update to F34 and U2104
    Update vendor opencontainers/selinux v1.8.1
    AUFS not supported in Ubuntu 21.04+
    build(deps): bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
    TestMatch: handle cases where NewPatternMatcher catches syntax errors
  1.30.2:
    Switch from ffjson to json-iterator
    Remove dependencies on ffjson
    Expand Variables on rootlessStoragePath
    Log expected rootless overlay mount failures as debug level</changelog>
  <changelog author="idesmi@protonmail.com" date="1624622400">- Update common to 0.38.11
  0.38.11:
  * Strip extra trailing newlines in templates
  * Set BigFilesTemporaryDir to GetEnv(TMPDIR) if set or /var/tmp
  0.38.10:
  * libimage: pull: override even --pull=never with custom platfo
  * libimage: pull: enforce pull policy for custom platforms
  * libimage: pull: ignore platform for local image lookup
  * Allow /etc/containers/containers.conf to be read by non-root
  * [0.38] libimage: force remove: only untag on multi tag image
  0.38.9:
  * libimage: fix Exists
  0.38.8:
  * libmage: Exists: catch corrupted images
  0.38.7:
  * libimage: pull: turn image-lookup errors non-fatal
  0.38.6:
  * [0.38] Leave default seccomp path empty
  0.38.5:
  * pull: don't resolve short names on explicit docker:// reference
  0.38.4:
    Revert "Do not emit warnings about OCI runtime paths"
    libimage: lookup: tolerate corrupted image
  0.38.3:
    build(deps): bump github.com/containers/storage from 1.30.3 to 1.31.1
    libimage: fix manifest list lookup
- Update podman to 3.2.2
  3.2.2:
  [#]## Changes
- Podman's handling of the Architecture field of images has been relaxed. Since 3.2.0, Podman required that the architecture of the image match the architecture of the system to run containers based on an image, but images often incorrectly report architecture, causing Podman to reject valid images ([#10648](https://github.com/containers/podman/issues/10648) and [#10682](https://github.com/containers/podman/issues/10682)).
- Podman no longer uses inotify to monitor for changes to CNI configurations. This removes potential issues where Podman cannot be run because a user has exhausted their available inotify sessions ([#10686](https://github.com/containers/podman/issues/10686)).
  [#]## Bugfixes
- Fixed a bug where the `podman cp` would, when given a directory as its source and a target that existed and was a file, copy the contents of the directory into the parent directory of the file; this now results in an error.
- Fixed a bug where the `podman logs` command would, when following a running container's logs, not include the last line of output from the container when it exited when the `k8s-file` driver was in use ([#10675](https://github.com/containers/podman/issues/10675)).
- Fixed a bug where Podman would fail to run containers if `systemd-resolved` was incorrectly detected as the system's DNS server ([#10733](https://github.com/containers/podman/issues/10733)).
- Fixed a bug where the `podman exec -t` command would only resize the exec session's TTY after the session started, leading to a race condition where the terminal would initially not have a size set ([#10560](https://github.com/containers/podman/issues/10560)).
- Fixed a bug where Podman containers using the `slirp4netns` network mode would add an incorrect entry to `/etc/hosts` pointing the container's hostname to the wrong IP address.
- Fixed a bug where Podman would create volumes specified by images with incorrect permissions ([#10188](https://github.com/containers/podman/issues/10188) and [#10606](https://github.com/containers/podman/issues/10606)).
- Fixed a bug where Podman would not respect the `uid` and `gid` options to `podman volume create -o` ([#10620](https://github.com/containers/podman/issues/10620)).
- Fixed a bug where the `podman run` command could panic when parsing the system's cgroup configuration ([#10666](https://github.com/containers/podman/issues/10666)).
- Fixed a bug where the remote Podman client's `podman build -f - ...` command did not read a Containerfile from STDIN ([#10621](https://github.com/containers/podman/issues/10621)).
- Fixed a bug where the `podman container restore --import` command would fail to restore checkpoints created from privileged containers ([#10615](https://github.com/containers/podman/issues/10615)).
- Fixed a bug where Podman was not respecting the `TMPDIR` environment variable when pulling images ([#10698](https://github.com/containers/podman/issues/10698)).
- Fixed a bug where a number of Podman commands did not properly support using Go templates as an argument to the `--format` option.
  [#]## API
- Fixed a bug where the Compat Inspect endpoint for Containers did not include information on container healthchecks ([#10457](https://github.com/containers/podman/issues/10457)).
- Fixed a bug where the Libpod and Compat Build endpoints for Images did not properly handle the `devices` query parameter ([#10614](https://github.com/containers/podman/issues/10614)).
  [#]## Misc
- Fixed a bug where the Makefile's `make podman-remote-static` target to build a statically-linked `podman-remote` binary was instead producing dynamic binaries ([#10656](https://github.com/containers/podman/issues/10656)).
- Updated the containers/common library to v0.38.11
  3.2.1:
  [#]## Changes
- Podman now allows corrupt images (e.g. from restarting the system during an image pull) to be replaced by a `podman pull` of the same image (instead of requiring they be removed first, then re-pulled).
  [#]## Bugfixes
- Fixed a bug where Podman would fail to start containers if a Seccomp profile was not available at `/usr/share/containers/seccomp.json` ([#10556](https://github.com/containers/podman/issues/10556)).
- Fixed a bug where the `podman machine start` command failed on OS X machines with the AMD64 architecture and certain QEMU versions ([#10555](https://github.com/containers/podman/issues/10555)).
- Fixed a bug where Podman would always use the slow path for joining the rootless user namespace.
- Fixed a bug where the `podman stats` command would fail on Cgroups v1 systems when run on a container running systemd ([#10602](https://github.com/containers/podman/issues/10602)).
- Fixed a bug where pre-checkpoint support for `podman container checkpoint` did not function correctly.
- Fixed a bug where the remote Podman client's `podman build` command did not properly handle the `-f` option ([#9871](https://github.com/containers/podman/issues/9871)).
- Fixed a bug where the remote Podman client's `podman run` command would sometimes not resize the container's terminal before execution began ([#9859](https://github.com/containers/podman/issues/9859)).
- Fixed a bug where the `--filter` option to the `podman image prune` command was nonfunctional.
- Fixed a bug where the `podman logs -f` command would exit before all output for a container was printed when the `k8s-file` log driver was in use ([#10596](https://github.com/containers/podman/issues/10596)).
- Fixed a bug where Podman would not correctly detect that systemd-resolved was in use on the host and adjust DNS servers in the container appropriately under some circumstances ([#10570](https://github.com/containers/podman/issues/10570)).
- Fixed a bug where the `podman network connect` and `podman network disconnect` commands acted improperly when containers were in the Created state, marking the changes as done but not actually performing them.
  [#]## API
- Fixed a bug where the Compat and Libpod Prune endpoints for Networks returned null, instead of an empty array, when nothing was pruned.
- Fixed a bug where the Create API for Images would continue to pull images even if a client closed the connection mid-pull ([#7558](https://github.com/containers/podman/issues/7558)).
- Fixed a bug where the Events API did not include some information (including labels) when sending events.
- Fixed a bug where the Events API would, when streaming was not requested, send at most one event ([#10529](https://github.com/containers/podman/issues/10529)).
  [#]## Misc
- Updated the containers/common library to v0.38.9
  3.2.0:
  [#]## Features
- Docker Compose is now supported with rootless Podman ([#9169](https://github.com/containers/podman/issues/9169)).
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442](https://github.com/containers/podman/issues/8442) and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed ([#6412](https://github.com/containers/podman/issues/6412)).
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface](https://github.com/container-orchestrated-devices/container-device-interface) (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) ([#5651](https://github.com/containers/podman/issues/5651)).
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
  [#]## Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209](https://github.com/containers/podman/issues/10209).
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image ([#8709](https://github.com/containers/podman/issues/8709)).
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates ([#10190](https://github.com/containers/podman/issues/10190)).
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, available cgroup controllers, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.
  [#]## Bugfixes
- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option ([#9869](https://github.com/containers/podman/issues/9869)).
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written ([#10233](https://github.com/containers/podman/issues/10233)).
- Fixed a bug where the remote Podman client's `podman build` command did not preserve hardlinks when moving files into the container via `COPY` instructions ([#9893](https://github.com/containers/podman/issues/9893)).
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate systemd --new` command would generate unit files that did not include `RequiresMountsFor` lines ([#10493](https://github.com/containers/podman/issues/10493)).
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container ([#9764](https://github.com/containers/podman/issues/9764)).
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) ([#9128](https://github.com/containers/podman/issues/9128)).
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal ([#10120](https://github.com/containers/podman/issues/10120)).
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports ([#9828](https://github.com/containers/podman/issues/9828)).
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager ([#10173](https://github.com/containers/podman/issues/10173)).
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted ([#10192](https://github.com/containers/podman/issues/10192)).
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory ([#10216](https://github.com/containers/podman/issues/10216)).
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted ([#8047](https://github.com/containers/podman/issues/8047)).
- Fixed a bug where the `podman cp` command could not copy files into containers created with the `--pid=host` flag ([#9985](https://github.com/containers/podman/issues/9985)).
- Fixed a bug where filters to the `podman events` command could not be specified twice (if a filter is specified more than once, it will match if any of the given values match - logical or) ([#10507](https://github.com/containers/podman/issues/10507)).
- Fixed a bug where Podman would include IPv6 nameservers in `resolv.conf` in containers without IPv6 connectivity ([#10158](https://github.com/containers/podman/issues/10158)).
- Fixed a bug where containers could not be created with static IP addresses when connecting to a network using the `macvlan` driver ([#10283](https://github.com/containers/podman/issues/10283)).
  [#]## API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set ([#10110](https://github.com/containers/podman/issues/10110)).
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block ([#10245](https://github.com/containers/podman/issues/10245)).
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network ([#9837](https://github.com/containers/podman/issues/9837)).
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume ([#9803](https://github.com/containers/podman/issues/9803)).
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) ([#10168](https://github.com/containers/podman/issues/10168)).
- Fixed a bug where the Compat Push endpoint for Images could leak goroutines if the remote end closed the connection prematurely.
  [#]## Misc
- Updated Buildah to v1.21.0
- Updated the containers/common library to v0.38.5
- Updated the containers/storage library to v1.31.3
  3.2.0-RC3:
  This is the third release candidate for Podman v3.2.0. We expect it will be the final RC.
  Preliminary release notes follow:
  [#]## Features
- Docker Compose is now supported with rootless Podman ([#9169](https://github.com/containers/podman/issues/9169)).
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442](https://github.com/containers/podman/issues/8442) and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed ([#6412](https://github.com/containers/podman/issues/6412)).
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface](https://github.com/container-orchestrated-devices/container-device-interface) (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) ([#5651](https://github.com/containers/podman/issues/5651)).
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
  [#]## Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209](https://github.com/containers/podman/issues/10209).
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image ([#8709](https://github.com/containers/podman/issues/8709)).
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates ([#10190](https://github.com/containers/podman/issues/10190)).
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, available cgroup controllers, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.
  [#]## Bugfixes
- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option ([#9869](https://github.com/containers/podman/issues/9869)).
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written ([#10233](https://github.com/containers/podman/issues/10233)).
- Fixed a bug where the remote Podman client's `podman build` command did not preserve hardlinks when moving files into the container via `COPY` instructions ([#9893](https://github.com/containers/podman/issues/9893)).
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container ([#9764](https://github.com/containers/podman/issues/9764)).
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) ([#9128](https://github.com/containers/podman/issues/9128)).
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal ([#10120](https://github.com/containers/podman/issues/10120)).
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports ([#9828](https://github.com/containers/podman/issues/9828)).
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager ([#10173](https://github.com/containers/podman/issues/10173)).
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted ([#10192](https://github.com/containers/podman/issues/10192)).
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory ([#10216](https://github.com/containers/podman/issues/10216)).
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted ([#8047](https://github.com/containers/podman/issues/8047)).
- Fixed a bug where the `podman cp` command could not copy files into containers created with the `--pid=host` flag ([#9985](https://github.com/containers/podman/issues/9985)).
  [#]## API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set ([#10110](https://github.com/containers/podman/issues/10110)).
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block ([#10245](https://github.com/containers/podman/issues/10245)).
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network ([#9837](https://github.com/containers/podman/issues/9837)).
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume ([#9803](https://github.com/containers/podman/issues/9803)).
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) ([#10168](https://github.com/containers/podman/issues/10168)).
  [#]## Misc
- Updated Buildah to v1.21.0
- Updated the containers/common library to v0.38.4
- Updated the containers/storage library to v1.31.1
  3.2.0-RC2:
  This is the second release candidate for Podman v3.2.0. We expect a final RC early next week, and a final release late next week if all goes well
  Preliminary release notes follow:
  [#]## Features
- Docker Compose is now supported with rootless Podman ([#9169](https://github.com/containers/podman/issues/9169)).
- The `podman network connect`, `podman network disconnect`, and `podman network reload` commands have been enabled for rootless Podman.
- An experimental new set of commands, `podman machine`, was added to assist in managing virtual machines containing a Podman server. These are intended for easing the use of Podman on OS X by handling the creation of a Linux VM for running Podman.
- The `podman generate kube` command can now be run on Podman named volumes (generating `PersistentVolumeClaim` YAML), in addition to pods and containers.
- The `podman play kube` command now supports two new options, `--ip` and `--mac`, to set static IPs and MAC addresses for created pods ([#8442](https://github.com/containers/podman/issues/8442) and [#9731](https://github.com/containers/podman/issues/9731)).
- The `podman play kube` command's support for `PersistentVolumeClaim` YAML has been greatly improved.
- The `podman generate kube` command now preserves the label used by `podman auto-update` to identify containers to update as a Kubernetes annotation, and the `podman play kube` command will convert this annotation back into a label. This allows `podman auto-update` to be used with containers created by `podman play kube`.
- The `podman play kube` command now supports Kubernetes `secretRef` YAML (using the secrets support from `podman secret`) for environment variables.
- Secrets can now be added to containers as environment variables using the `type=env` option to the `--secret` flag to `podman create` and `podman run`.
- The `podman start` command now supports the `--all` option, allowing all containers to be started simultaneously with a single command. The `--filter` option has also been added to filter which containers to start when `--all` is used.
- Filtering containers with the `--filter` option to `podman ps` and `podman start` now supports a new filter, `restart-policy`, to filter containers based on their restart policy.
- The `--group-add` option to rootless `podman run` and `podman create` now accepts a new value, `keep-groups`, which instructs Podman to retain the supplemental groups of the user running Podman in the created container. This is only supported with the `crun` OCI runtime.
- The `podman run` and `podman create` commands now support a new option, `--timeout`. This sets a maximum time the container is allowed to run, after which it is killed ([#6412](https://github.com/containers/podman/issues/6412)).
- The `podman run` and `podman create` commands now support a new option, `--pidfile`. This will create a file when the container is started containing the PID of the first process in the container.
- The `podman run` and `podman create` commands now support a new option, `--requires`. The `--requires` option adds dependency containers - containers that must be running before the current container. Commands like `podman start` will automatically start the requirements of a container before starting the container itself.
- Auto-updating containers can now be done with locally-built images, not just images hosted on a registry, by creating containers with the `io.containers.autoupdate` label set to `local`.
- Podman now supports the [Container Device Interface](https://github.com/container-orchestrated-devices/container-device-interface) (CDI) standard.
- Podman now adds an entry to `/etc/hosts`, `host.containers.internal`, pointing to the current gateway (which, for root containers, is usually a bridge interface on the host system) ([#5651](https://github.com/containers/podman/issues/5651)).
- The `podman ps`, `podman pod ps`, `podman network list`, `podman secret list`, and `podman volume list` commands now support a `--noheading` option, which will cause Podman to omit the heading line including column names.
- The `podman unshare` command now supports a new flag, `--rootless-cni`, to join the rootless network namespace. This allows commands to be run in the same network environment as rootless containers with CNI networking.
- The `--security-opt unmask=` option to `podman run` and `podman create` now supports glob operations to unmask a group of paths at once (e.g. `podman run --security-opt unmask=/proc/* ...` will unmask all paths in `/proc` in the container).
- The `podman network prune` command now supports a `--filter` option to filter which networks will be pruned.
  [#]## Changes
- The change in Podman 3.1.2 where the `:z` and `:Z` mount options for volumes were ignored for privileged containers has been reverted after discussion in [#10209](https://github.com/containers/podman/issues/10209).
- Podman's rootless CNI functionality no longer requires a sidecar container! The removal of the requirement for the `rootless-cni-infra` container means that rootless CNI is now usable on all architectures, not just AMD64, and no longer requires pulling an image ([#8709](https://github.com/containers/podman/issues/8709)).
- The Image handling code used by Podman has seen a major rewrite to improve code sharing with our other projects, Buildah and CRI-O. This should result in fewer bugs and performance gains in the long term. Work on this is still ongoing.
- The `podman auto-update` command now prunes previous versions of images after updating if they are unused, to prevent disk exhaustion after repeated updates ([#10190](https://github.com/containers/podman/issues/10190)).
- The `podman play kube` now treats environment variables configured as references to a `ConfigMap` as mandatory unless the `optional` parameter was set; this better matches the behavior of Kubernetes.
- Podman now supports the `--context=default` flag from Docker as a no-op for compatibility purposes.
- When Podman is run as root, but without `CAP_SYS_ADMIN` being available, it will run in a user namespace using the same code as rootless Podman (instead of failing outright).
- The `podman info` command now includes the path of the Seccomp profile Podman is using, and whether Podman is connected to a remote service or running containers locally.
- Containers created with the `--rm` option now automatically use the `volatile` storage flag when available for their root filesystems, causing them not to write changes to disk as often as they will be removed at completion anyways. This should result in improved performance.
- The `podman generate systemd --new` command will now include environment variables referenced by the container in generated unit files if the value would be looked up from the system environment.
- Podman now requires that Conmon v2.0.24 be available.
  [#]## Bugfixes
- Fixed a bug where the remote Podman client's `podman build` command did not support the `--arch`, `--platform`, and `--os`, options.
- Fixed a bug where the remote Podman client's `podman build` command ignored the `--rm=false` option ([#9869](https://github.com/containers/podman/issues/9869)).
- Fixed a bug where the `podman generate systemd --new` command could generate extra `--iidfile` arguments if the container was already created with one.
- Fixed a bug where the `podman generate kube` command produced incorrect YAML for containers which bind-mounted both `/` and `/root` from the host system into the container ([#9764](https://github.com/containers/podman/issues/9764)).
- Fixed a bug where pods created by `podman play kube` from YAML that specified `ShareProcessNamespace` would only share the PID namespace (and not also the UTS, Network, and IPC namespaces) ([#9128](https://github.com/containers/podman/issues/9128)).
- Fixed a bug where the `podman network reload` command could generate spurious error messages when `iptables-nft` was in use.
- Fixed a bug where rootless Podman could fail to attach to containers when the user running Podman had a large UID.
- Fixed a bug where the `podman ps` command could fail with a `no such container` error due to a race condition with container removal ([#10120](https://github.com/containers/podman/issues/10120)).
- Fixed a bug where containers using the `slirp4netns` network mode and setting a custom `slirp4netns` subnet while using the `rootlesskit` port forwarder would not be able to forward ports ([#9828](https://github.com/containers/podman/issues/9828)).
- Fixed a bug where the `--filter ancestor=` option to `podman ps` did not require an exact match of the image name/ID to include a container in its results.
- Fixed a bug where the `--filter until=` option to `podman image prune` would prune images created after the specified time (instead of before).
- Fixed a bug where setting a custom Seccomp profile via the `seccomp_profile` option in `containers.conf` had no effect, and the default profile was used instead.
- Fixed a bug where the `--cgroup-parent` option to `podman create` and `podman run` was ignored in rootless Podman on cgroups v2 systems with the `cgroupfs` cgroup manager ([#10173](https://github.com/containers/podman/issues/10173)).
- Fixed a bug where the `IMAGE` and `NAME` variables in `podman container runlabel` were not being correctly substituted ([#10192](https://github.com/containers/podman/issues/10192)).
- Fixed a bug where the remote Podman client's `podman build --iidfile` command could include extra output (in addition to just the image ID) in the image ID file written ([#10233](https://github.com/containers/podman/issues/10233)).
- Fixed a bug where Podman could freeze when creating containers with a specific combination of volumes and working directory ([#10216](https://github.com/containers/podman/issues/10216)).
- Fixed a bug where rootless Podman containers restarted by restart policy (e.g. containers created with `--restart=always`) would lose networking after being restarted ([#8047](https://github.com/containers/podman/issues/8047)).
  [#]## API
- Fixed a bug where the Compat Create endpoint for Containers did not allow advanced network options to be set ([#10110](https://github.com/containers/podman/issues/10110)).
- Fixed a bug where the Compat Create endpoint for Containers ignored static IP information provided in the `IPAMConfig` block ([#10245](https://github.com/containers/podman/issues/10245)).
- Fixed a bug where the Compat Inspect endpoint for Containers returned null (instead of an empty list) for Networks when the container was not joined to a CNI network ([#9837](https://github.com/containers/podman/issues/9837)).
- Fixed a bug where the Compat Wait endpoint for Containers could miss containers exiting if they were immediately restarted.
- Fixed a bug where the Compat Create endpoint for Volumes required that the user provide a name for the new volume ([#9803](https://github.com/containers/podman/issues/9803)).
- Fixed a bug where the Libpod Info handler would sometimes not return the correct path to the Podman API socket.
- Fixed a bug where the Compat Events handler used the wrong name for container exited events (`died` instead of `die`) ([#10168](https://github.com/containers/podman/issues/10168)).
  [#]## Misc
- Updated Buildah to v1.21.0
- Updated the containers/common library to v0.38.4
- Updated the containers/storage library to v1.31.1
  3.2.0-RC1:
  This is the first release candidate for the Podman v3.2.0 release. Podman 3.2.0 features improved rootless networking (including support for rootless Docker compose), a rewritten image backend, and numerous other changes.
  Full release notes will be available with the release of RC2 next week.
- Update storage to 1.32.5
  1.32.5:
    Fix handling of user namespace
  1.32.4:
    Vendor in opencontainers/runc v1.0.0
    overlay: fix check for rootless native diff
  1.32.3:
    Reload layer storage if layers.json got externally modified
    build(deps): bump github.com/klauspost/compress from 1.13.0 to 1.13.1
    Fix cancel deferred remove bug
    Cirrus: Fix references to master branch
    [CI:DOCS] Fix docs links due to branch rename
  1.32.2:
    lockfile: merge Seek+Read/Write into Pread/Pwrite
    Added support for CONTAINERS_STORAGE_CONF override
    canUseShifting can segfault
    build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
    build(deps): bump github.com/klauspost/compress from 1.12.3 to 1.13.0
    overlay: make userxattr,metacopy=on debug message
    build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  1.31.3:
  * store: ReloadIfChanged propagates errors from Modified()
  * store: load additional image stores once
  * store: fix graphLock reload
  1.32.1:
    store: fix graphLock reload
    store: ReloadIfChanged propagates errors from Modified()
    store: load additional image stores once
    delete_internal: return error early
    build(deps): bump github.com/klauspost/compress from 1.12.2 to 1.12.3
  1.32.0:
    chunked: fix build on other platforms
    Avoid failure when umount an unmounted mountpoint
    overlay: enable native diff for fuse-overlayfs
    Enable to export layers from Additional Layer Store
  1.31.2:
    build(deps): bump github.com/Microsoft/go-winio from 0.4.17 to 0.5.0
    build(deps): bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
    reintroduce store: allow shifting only with contiguous mappings
    overlay: check for unix.ENOTSUP
    archive/overlay: ignore failures from nested whiteouts
    overlay: honor DisableShifting
    store: allow shifting only with contiguous mappings
  1.31.1:
    Revert "store: allow shifting only with contiguous mappings"
- Update image to 5.13.2
  v0.38.11:
  * Strip extra trailing newlines in templates
  * Set BigFilesTemporaryDir to GetEnv(TMPDIR) if set or /var/tmp
  v0.38.10:
  * libimage: pull: override even --pull=never with custom platfo
  * libimage: pull: enforce pull policy for custom platforms
  * libimage: pull: ignore platform for local image lookup
  * Allow /etc/containers/containers.conf to be read by non-root
  * [0.38] libimage: force remove: only untag on multi tag image
  v0.38.9:
  * libimage: fix Exists
  v0.38.8:
  * libmage: Exists: catch corrupted images
  v0.38.7:
  * libimage: pull: turn image-lookup errors non-fatal
  v0.38.6:
  * [0.38] Leave default seccomp path empty
  v0.38.5:
  * pull: don't resolve short names on explicit docker:// reference
  v0.38.4:
  * Revert "Do not emit warnings about OCI runtime paths"
  * libimage: lookup: tolerate corrupted image
  v0.38.3:
  * build(deps): bump github.com/containers/storage from 1.30.3 to 1.31.1
  * libimage: fix manifest list lookup</changelog>
  <changelog author="fvogt@suse.com" date="1624968000">- Mention libcontainers-common.rpmlintrc as source
- Use versioned obsoletes</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update common to 0.41.0
  0.38.18:
    [0.38] seccomp: add support for defaultErrnoRet
  0.41.0:
    Allow /etc/containers/containers.conf to be read by non-root
    Created numMem_linux.go and numMem.go and nummem_unsupported.go
    Fix default definition of secrets in containers.conf
    Report bad entries in containers.conf to the user
    add shelldriver.
    build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
    build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.5
    build(deps): bump github.com/mitchellh/mapstructure from 1.1.2 to 1.4.1
    build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
    build(deps): bump github.com/spf13/cobra from 1.1.3 to 1.2.1
    feat: add shell secret driver.
    libimage: LookupImage: remove IgnorePlatform option
    libimage: `(*Runtime).SystemContext()`
    libimage: events: deferred write
    libimage: force internal image lookups to ignore arch
    libimage: import: fix tags
    libimage: pull: enforce pull policy for custom platforms
    libimage: pull: ignore platform for local image lookup
    libimage: pull: override even --pull=never with custom platform
    pull: custom platform: do not use local image name
  0.38.13:
  * libimage: events: deferred write
  0.38.12:
  * pull: custom platform: do not use local image name
  0.40.1:
    Vendor in containers/image v5.13.2
    seccomp: tweak default profile (followup for #573)
    libimage: lookup images by custom platform
    libimage: force remove: only untag on multi tag image
    build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
    Set BigFilesTemporaryDir to GetEnv(TMPDIR) if set or /var/tmp
    seccomp: always allow get_mempolicy, set_mempolicy, mbind
    seccomp: let membarrier fail with ENOSYS
    seccomp: allow rseq
    seccomp: allow pkey_*
    seccomp: let io_uring_* fail with ENOSYS
    seccomp: allow clone3
  0.40.0:
    Add default for log-tag
    Add support for config drop in directories
    Do not set the default netns
    Don't use systemd defaults if /proc/1/comm != systemd
    Fix spacing on name value pairs to be consistent
    Leave default seccomp path empty
    Sort containers.conf and containers.conf.5.md
    Strip extra trailing newlines in templates
    Tests are writing customer config to host machine
    Use SetCredentials and add verbose to loginopts
    [NO TESTS NEEDED] Sort containers.conf and containers.conf.5.md
    add 'secret' section to the containers.conf struct.
    add @Luap99 to OWNERS
    add passdriver for secrets.
    build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
    build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.2
    build(deps): bump github.com/docker/docker
    build(deps): bump github.com/jinzhu/copier from 0.3.0 to 0.3.2
    build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.4
    build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
    build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
    fix autodiscovery of the secret passdriver.
    fixed comments
    libimage: fix Exists
    libimage: pull: turn image-lookup errors non-fatal
    libmage: Exists: catch corrupted images
    made necessary changes to handle OS/Arch while importing an image
    pkg/config: fix systemd compile errors
    pull: don't resolve short names on explicit docker:// reference
    seccomp: add support for defaultErrnoRet
    seccomp: allow more *_time64 syscalls
    seccomp: allow timer_settime64
    seccomp: switch default to ENOSYS
    secrets: fix build with go 1.15
    support tag@digest notation
  0.39.0:
    Vendor in containers/storage v1.32.0
    Ensure configuration directory is created for networks
    Include gateway in generated default networks
    Use Private as default for rootless when we want CNI
    rootless networking
    libimage: add some comments
    libimage: add more image tests
    build(deps): bump github.com/containers/storage from 1.31.1 to 1.32.0
    rootless_networking = "slirp4netns | cni"
    build(deps): bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
- Update podman to 3.2.3
  3.2.3:
  [#]## Security
- This release addresses CVE-2021-3602, an issue with the `podman build` command with the `--isolation chroot` flag that results in environment variables from the host leaking into build containers.
  [#]## Bugfixes
- Fixed a bug where events related to images could occur before the relevant operation had completed (e.g. an image pull event could be written before the pull was finished) ([#10812](https://github.com/containers/podman/issues/10812)).
- Fixed a bug where `podman save` would refuse to save images with an architecture different from that of the host ([#10835](https://github.com/containers/podman/issues/10835)).
- Fixed a bug where the `podman import` command did not correctly handle images without tags ([#10854](https://github.com/containers/podman/issues/10854)).
- Fixed a bug where Podman's journald events backend would fail and prevent Podman from running when run on a host with systemd as PID1 but in an environment (e.g. a container) without systemd ([#10863](https://github.com/containers/podman/issues/10863)).
- Fixed a bug where containers using rootless CNI networking would fail to start when the `dnsname` CNI plugin was in use and the host system's `/etc/resolv.conf` was a symlink ([#10855](https://github.com/containers/podman/issues/10855) and [#10929](https://github.com/containers/podman/issues/10929)).
- Fixed a bug where containers using rootless CNI networking could fail to start due to a race in rootless CNI initialization ([#10930](https://github.com/containers/podman/issues/10930)).
  [#]## Misc
- Updated Buildah to v1.21.3
- Updated the containers/common library to v0.38.16
- Update storage to 1.32.6
  1.32.6:
    Fix runtime panic for opening lockfile if parent dir got removed
    Cleanup exclude exceptions path
    build(deps): bump github.com/Microsoft/hcsshim from 0.8.17 to 0.8.20
    Add test for bad entries in storage.conf
    chunked: fix the path used for layers dedup
    Report bad entries in storage.conf to the user
    Use /run/user/UID in rootless mode if writable
- Update image to 5.14.0
  v0.41.0:
  * Allow /etc/containers/containers.conf to be read by non-root
  * Created numMem_linux.go and numMem.go and nummem_unsupported.go
  * Fix default definition of secrets in containers.conf
  * Report bad entries in containers.conf to the user
  * add shelldriver.
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.5
  * build(deps): bump github.com/mitchellh/mapstructure from 1.1.2 to 1.4.1
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * build(deps): bump github.com/spf13/cobra from 1.1.3 to 1.2.1
  * feat: add shell secret driver.
  * libimage: LookupImage: remove IgnorePlatform option
  * libimage: `(*Runtime).SystemContext()`
  * libimage: events: deferred write
  * libimage: force internal image lookups to ignore arch
  * libimage: import: fix tags
  * libimage: pull: enforce pull policy for custom platforms
  * libimage: pull: ignore platform for local image lookup
  * libimage: pull: override even --pull=never with custom platform
  * pull: custom platform: do not use local image name
  v0.40.1:
  * Vendor in containers/image v5.13.2
  * seccomp: tweak default profile (followup for #573)
  * libimage: lookup images by custom platform
  * libimage: force remove: only untag on multi tag image
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * Set BigFilesTemporaryDir to GetEnv(TMPDIR) if set or /var/tmp
  * seccomp: always allow get_mempolicy, set_mempolicy, mbind
  * seccomp: let membarrier fail with ENOSYS
  * seccomp: allow rseq
  * seccomp: allow pkey_*
  * seccomp: let io_uring_* fail with ENOSYS
  * seccomp: allow clone3
  v0.40.0:
  * Add default for log-tag
  * Add support for config drop in directories
  * Do not set the default netns
  * Don't use systemd defaults if /proc/1/comm != systemd
  * Fix spacing on name value pairs to be consistent
  * Leave default seccomp path empty
  * Sort containers.conf and containers.conf.5.md
  * Strip extra trailing newlines in templates
  * Tests are writing customer config to host machine
  * Use SetCredentials and add verbose to loginopts
  * [NO TESTS NEEDED] Sort containers.conf and containers.conf.5.md
  * add 'secret' section to the containers.conf struct.
  * add @Luap99 to OWNERS
  * add passdriver for secrets.
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.2
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/jinzhu/copier from 0.3.0 to 0.3.2
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.4
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * fix autodiscovery of the secret passdriver.
  * fixed comments
  * libimage: fix Exists
  * libimage: pull: turn image-lookup errors non-fatal
  * libmage: Exists: catch corrupted images
  * made necessary changes to handle OS/Arch while importing an image
  * pkg/config: fix systemd compile errors
  * pull: don't resolve short names on explicit docker:// reference
  * seccomp: add support for defaultErrnoRet
  * seccomp: allow more *_time64 syscalls
  * seccomp: allow timer_settime64
  * seccomp: switch default to ENOSYS
  * secrets: fix build with go 1.15
  * support tag@digest notation
  v0.39:
  * Vendor in containers/storage v1.32.0
  * Ensure configuration directory is created for networks
  * Include gateway in generated default networks
  * Use Private as default for rootless when we want CNI
  * rootless networking
  * libimage: add some comments
  * libimage: add more image tests
  * build(deps): bump github.com/containers/storage from 1.31.1 to 1.32.0
  * rootless_networking = "slirp4netns | cni"
  * build(deps): bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95</changelog>
  <changelog author="rbrown@suse.com" date="1630929600">- Comment out ostree_repo [boo#1189893]</changelog>
  <changelog author="rbrown@suse.com" date="1631880000">- Comment out ostree_repo if it's blank [boo#1189893]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880001">- Update common to 0.44.0
  0.42.3:
  * (*libimage.Image).HasDifferentDigest: add authentication
  0.42.2:
    Backports for Podman 3.3.2
    Fix the fallback runtime path
    Switch default Rootless Networking to "CNI" for OSX
    libimage: disk usage: catch corrupted images
    set GOPROXY=https://proxy.golang.org
  0.44.0:
    Add HelperBinariesDir field to engine config
    Add space trimming check in sysctl.Validate
    Cirrus: Use fresher VM images
    Fix `pkg/sysctl` path typo
    Fix the fallback runtime path
    Switch default Rootless Networking to "CNI" for OSX
    Update pkg/sysctl/sysctl.go
    add some cni plugin paths
    build(deps): bump github.com/containers/image/v5 from 5.15.0 to 5.16.0
    build(deps): bump github.com/containers/storage from 1.34.0 to 1.35.0
    build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.16.0
    build(deps): bump github.com/opencontainers/runc from 1.0.1 to 1.0.2
    build(deps): bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
    docs/containers.conf.5.md: Fix manpage section
    fix untag + v0.43.2
    libimage: disk usage: catch corrupted images
    libimage: relax untag by digest checks
    path: dest paths inside container should always be treated as *nix type
    remove-image: Add optional `LookupManifest` to RemoveImagesOptions.
    runtime: Add ReturnManifestIfPresent to LookupImageOptions
    runtime: Add `ManifestList` to `LookupImageOptions`
    seccomp: allow memfd_secret
  0.43.2:
  * libimage: relax untag by digest checks
  * path: dest paths inside container should always be treated as *nix type
  0.43.1:
  Fix spelling mistakes
  Fix examples in containers.conf
  0.43.0:
    Add documentation for Containerfile and Dockerfile
    Remove no_libsubid flag
    Add machine_image to containers.conf
    build(deps): bump github.com/containers/storage from 1.33.1 to 1.34.0
    build(deps): bump github.com/opencontainers/selinux from 1.8.2 to 1.8.4
    Add machine_image to containers.conf
    Switch default logdriver and eventslogger to journald, if root
    build(deps): bump github.com/BurntSushi/toml from 0.3.1 to 0.4.1
    build(deps): bump github.com/onsi/gomega from 1.14.0 to 1.15.0
    libimage: {un}tag: reject digests
    build(deps): bump github.com/docker/docker from 20.10.7+incompatible to 20.10.8+incompatible
    style: complete containers#556 to-do list part 4
    build(deps): bump github.com/containers/image/v5 from 5.14.0 to 5.15.0
    set GOPROXY=https://proxy.golang.org
  0.42.1:
  * pull: fallthrough for registry parsing errors
  0.42.0:
  * Remove --accept-repositories flag
  * pull policy: support camel cases
  * Use authfile in options to search image
  * vendor in containers/storage v1.33.0
  * config: split arguments in DBUS_SESSION_BUS_ADDRESS
  * pkg/seccomp: avoid DefaultErrnoRet: null
  * Add and use libimage.Runtime.imageIDsForManifest()
  * Add libimage/manifests.LockerForImage()
  * Add support for path based registry in login/logout
  * libimage: pull: normalize docker-daemon
  * libimage: report all removed images
  * libruntime: layer tree: handle empty images
  * refine dangling filters
  * libimage.RuntimeFromStore(): stop overriding the BlobInfoCache location
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * pull with custom platform: handle "localhost/"
  * User option to prepare container after creation for volume copy-up. Docker does this by default.
  * add config option for ChownCopiedFiles
  * build(deps): bump github.com/containers/storage from 1.32.5 to 1.32.6
  * libimage: image tree: fix nil deref
- Update podman to 3.3.1
  3.3.1:
  [#]## Bugfixes
- Fixed a bug where unit files created by `podman generate systemd` could not cleanup shut down containers when stopped by `systemctl stop` ([#11304](https://github.com/containers/podman/issues/11304)).
- Fixed a bug where `podman machine` commands would not properly locate the `gvproxy` binary in some circumstances.
- Fixed a bug where containers created as part of a pod using the `--pod-id-file` option would not join the pod's network namespace ([#11303](https://github.com/containers/podman/issues/11303)).
- Fixed a bug where Podman, when using the systemd cgroups driver, could sometimes leak dbus sessions.
- Fixed a bug where the `until` filter to `podman logs` and `podman events` was improperly handled, requiring input to be negated ([#11158](https://github.com/containers/podman/issues/11158)).
- Fixed a bug where rootless containers using CNI networking run on systems using `systemd-resolved` for DNS would fail to start if resolved symlinked `/etc/resolv.conf` to an absolute path ([#11358](https://github.com/containers/podman/issues/11358)).
  [#]## API
- A large number of potential file descriptor leaks from improperly closing client connections have been fixed.
  3.3.0:
  [#]## Features
- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) ([#10807](https://github.com/containers/podman/issues/10807)).
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) ([#6721](https://github.com/containers/podman/issues/6721)).
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) ([#7370](https://github.com/containers/podman/issues/7370)).
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set ([#10794](https://github.com/containers/podman/issues/10794)).
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update ([#9949](https://github.com/containers/podman/issues/9949)).
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time ([#10579](https://github.com/containers/podman/issues/10579)).
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container ([#10361](https://github.com/containers/podman/issues/10361)).
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed ([#10649](https://github.com/containers/podman/issues/10649)).
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` ([#10262](https://github.com/containers/podman/issues/10262)).
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
  [#]## Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy](https://github.com/containers/gvisor-tap-vsock) in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` ([#10393](https://github.com/containers/podman/issues/10393)).
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default ([#10655](https://github.com/containers/podman/issues/10655)).
- Systemd unit files generated by `podman generate systemd` now use `Type=notify` by default, instead of using PID files.
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.
  [#]## Bugfixes
- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options ([#9371](https://github.com/containers/podman/issues/9371)).
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images ([#9609](https://github.com/containers/podman/issues/9609)).
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container ([#10273](https://github.com/containers/podman/issues/10273)).
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container ([#10323](https://github.com/containers/podman/issues/10323)).
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not ([#10435](https://github.com/containers/podman/issues/10435)).
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited ([#9777](https://github.com/containers/podman/issues/9777)).
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited ([#10575](https://github.com/containers/podman/issues/10575)).
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted ([#10824](https://github.com/containers/podman/issues/10824)).
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file ([#11124](https://github.com/containers/podman/issues/11124)).
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) ([#10907](https://github.com/containers/podman/issues/10907)).
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error ([#9867](https://github.com/containers/podman/issues/9867)).
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build ([#10154](https://github.com/containers/podman/issues/10154)).
- Fixed a bug where the remote Podman client's `podman build` command would fail to build when run on Windows ([#11259](https://github.com/containers/podman/issues/11259)).
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container ([#10776](https://github.com/containers/podman/issues/10776)).
- Fixed a bug where named volumes created using a volume plugin would be removed from Podman, even if the plugin reported a failure to remove the volume ([#11214](https://github.com/containers/podman/issues/11214)).
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;"hello"`) ([#7360](https://github.com/containers/podman/issues/7360)).
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start ([#10935](https://github.com/containers/podman/issues/10935)).
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional ([#10264](https://github.com/containers/podman/issues/10264)).
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional ([#10302](https://github.com/containers/podman/issues/10302)).
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images ([#10994](https://github.com/containers/podman/issues/10994)).
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) ([#10998](https://github.com/containers/podman/issues/10998)).
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children ([#10832](https://github.com/containers/podman/issues/10832)).
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified ([#11032](https://github.com/containers/podman/issues/11032)).
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected ([#10052](https://github.com/containers/podman/issues/10052)).
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 ([#11100](https://github.com/containers/podman/issues/11100)).
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` ([#10319](https://github.com/containers/podman/issues/10319)).
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused ([#11098](https://github.com/containers/podman/issues/11098)).
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed ([#11131](https://github.com/containers/podman/issues/11131)).
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
- Fixed a bug where rootless Podman containers joined to a CNI network would not have functional DNS when the host used systemd-resolved without the resolved stub resolver being enabled ([#11222](https://github.com/containers/podman/issues/11222)).
- Fixed a bug where `podman network connect` and `podman network disconnect` of rootless containers could sometimes break port forwarding to the container ([#11248](https://github.com/containers/podman/issues/11248)).
- Fixed a bug where joining a container to a CNI network by ID and adding network aliases to this network would cause the container to fail to start ([#11285](https://github.com/containers/podman/issues/11285)).
  [#]## API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` ([#10569](https://github.com/containers/podman/issues/10569)).
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands ([#10617](https://github.com/containers/podman/issues/10617)).
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field ([#10795](https://github.com/containers/podman/issues/10795)).
- Fixed a bug where the Compat Build endpoint for Images was too strict when validating the `Content-Type` header, rejecting content that Docker would have accepted ([#11022](https://github.com/containers/podman/issues/11012)).
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks ([#10266](https://github.com/containers/podman/issues/10266)).
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present ([#10495](https://github.com/containers/podman/issues/10495)).
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter ([#10859](https://github.com/containers/podman/issues/10859)).
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.
  [#]## Misc
- Updated Buildah to v1.22.3
- Updated the containers/storage library to v1.34.1
- Updated the containers/image library to v5.15.2
- Updated the containers/common library to v0.42.1
  3.3.0-RC3:
  This is the third release candidate of Podman v3.3.0
  Preliminary release notes follow:
  [#]## Features
- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) ([#10807](https://github.com/containers/podman/issues/10807)).
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) ([#6721](https://github.com/containers/podman/issues/6721)).
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) ([#7370](https://github.com/containers/podman/issues/7370)).
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set ([#10794](https://github.com/containers/podman/issues/10794)).
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update ([#9949](https://github.com/containers/podman/issues/9949)).
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time ([#10579](https://github.com/containers/podman/issues/10579)).
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container ([#10361](https://github.com/containers/podman/issues/10361)).
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed ([#10649](https://github.com/containers/podman/issues/10649)).
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` ([#10262](https://github.com/containers/podman/issues/10262)).
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
  [#]## Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy](https://github.com/containers/gvisor-tap-vsock) in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` ([#10393](https://github.com/containers/podman/issues/10393)).
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default ([#10655](https://github.com/containers/podman/issues/10655)).
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.
  [#]## Bugfixes
- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options ([#9371](https://github.com/containers/podman/issues/9371)).
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images ([#9609](https://github.com/containers/podman/issues/9609)).
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container ([#10273](https://github.com/containers/podman/issues/10273)).
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container ([#10323](https://github.com/containers/podman/issues/10323)).
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not ([#10435](https://github.com/containers/podman/issues/10435)).
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited ([#9777](https://github.com/containers/podman/issues/9777)).
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited ([#10575](https://github.com/containers/podman/issues/10575)).
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted ([#10824](https://github.com/containers/podman/issues/10824)).
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file ([#11124](https://github.com/containers/podman/issues/11124)).
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) ([#10907](https://github.com/containers/podman/issues/10907)).
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error ([#9867](https://github.com/containers/podman/issues/9867)).
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build ([#10154](https://github.com/containers/podman/issues/10154)).
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container ([#10776](https://github.com/containers/podman/issues/10776)).
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;"hello"`) ([#7360](https://github.com/containers/podman/issues/7360)).
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start ([#10935](https://github.com/containers/podman/issues/10935)).
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional ([#10264](https://github.com/containers/podman/issues/10264)).
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional ([#10302](https://github.com/containers/podman/issues/10302)).
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images ([#10994](https://github.com/containers/podman/issues/10994)).
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) ([#10998](https://github.com/containers/podman/issues/10998)).
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children ([#10832](https://github.com/containers/podman/issues/10832)).
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified ([#11032](https://github.com/containers/podman/issues/11032)).
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected ([#10052](https://github.com/containers/podman/issues/10052)).
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 ([#11100](https://github.com/containers/podman/issues/11100)).
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` ([#10319](https://github.com/containers/podman/issues/10319)).
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused ([#11098](https://github.com/containers/podman/issues/11098)).
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed ([#11131](https://github.com/containers/podman/issues/11131)).
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
  [#]## API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` ([#10569](https://github.com/containers/podman/issues/10569)).
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands ([#10617](https://github.com/containers/podman/issues/10617)).
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field ([#10795](https://github.com/containers/podman/issues/10795)).
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks ([#10266](https://github.com/containers/podman/issues/10266)).
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present ([#10495](https://github.com/containers/podman/issues/10495)).
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter ([#10859](https://github.com/containers/podman/issues/10859)).
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.
  [#]## Misc
- Updated Buildah to v1.22.0
- Updated the containers/storage library to v1.34.1
- Updated the containers/image library to v5.15.1
- Updated the containers/common library to v0.42.1
  3.3.0-RC2:
  [#]## Features
- Containers inside VMs created by `podman machine` will now automatically handle port forwarding - containers in `podman machine` VMs that publish ports via `--publish` or `--publish-all` will have these ports not just forwarded on the VM, but also on the host system.
- The `podman play kube` command's `--network` option now accepts advanced network options (e.g. `--network slirp4netns:port_handler=slirp4netns`) ([#10807](https://github.com/containers/podman/issues/10807)).
- The `podman play kube` commmand now supports Kubernetes liveness probes, which will be created as Podman healthchecks.
- Podman now provides a systemd unit, `podman-restart.service`, which, when enabled, will restart all containers that were started with `--restart=always` after the system reboots.
- Rootless Podman can now be configured to use CNI networking by default by using the `rootless_networking` option in `containers.conf`.
- Images can now be pulled using `image:tag@digest` syntax (e.g. `podman pull fedora:34@sha256:1b0d4ddd99b1a8c8a80e885aafe6034c95f266da44ead992aab388e6aa91611a`) ([#6721](https://github.com/containers/podman/issues/6721)).
- The `podman container checkpoint` and `podman container restore` commands can now be used to checkpoint containers that are in pods, and restore those containers into pods.
- The `podman container restore` command now features a new option, `--publish`, to change the ports that are forwarded to a container that is being restored from an exported checkpoint.
- The `podman container checkpoint` command now features a new option, `--compress`, to specify the compression algorithm that will be used on the generated checkpoint.
- The `podman pull` command can now pull multiple images at once (e.g. `podman pull fedora:34 ubi8:latest` will pull both specified images).
- THe `podman cp` command can now copy files from one container into another directly (e.g. `podman cp containera:/etc/hosts containerb:/etc/`) ([#7370](https://github.com/containers/podman/issues/7370)).
- The `podman cp` command now supports a new option, `--archive`, which controls whether copied files will be chown'd to the UID and GID of the user of the destination container.
- The `podman stats` command now provides two additional metrics: Average CPU, and CPU time.
- The `podman pod create` command supports a new flag, `--pid`, to specify the PID namespace of the pod. If specified, containers that join the pod will automatically share its PID namespace.
- The `podman pod create` command supports a new flag, `--infra-name`, which allows the name of the pod's infra container to be set ([#10794](https://github.com/containers/podman/issues/10794)).
- The `podman auto-update` command has had its output reformatted - it is now much clearer what images were pulled and what containers were updated.
- The `podman auto-update` command now supports a new option, `--dry-run`, which reports what would be updated but does not actually perform the update ([#9949](https://github.com/containers/podman/issues/9949)).
- The `podman build` command now supports a new option, `--secret`, to mount secrets into build containers.
- The `podman manifest remove` command now has a new alias, `podman manifest rm`.
- The `podman login` command now supports a new option, `--verbose`, to print detailed information about where the credentials entered were stored.
- The `podman events` command now supports a new event, `exec_died`, which is produced when an exec session exits, and includes the exit code of the exec session.
- The `podman system connection add` command now supports adding connections that connect using the `tcp://` and `unix://` URL schemes.
- The `podman system connection list` command now supports a new flag, `--format`, to determine how the output is printed.
- The `podman volume prune` and `podman volume ls` commands' `--filter` option now support a new filter, `until`, that matches volumes created before a certain time ([#10579](https://github.com/containers/podman/issues/10579)).
- The `podman ps --filter` option's `network` filter now accepts a new value: `container:`, which matches containers that share a network namespace with a specific container ([#10361](https://github.com/containers/podman/issues/10361)).
- The `podman diff` command can now accept two arguments, allowing two images or two containers to be specified; the diff between the two will be printed ([#10649](https://github.com/containers/podman/issues/10649)).
- Podman can now optionally copy-up content from containers into volumes mounted into those containers earlier (at creation time, instead of at runtime) via the `prepare_on_create` option in `containers.conf` ([#10262](https://github.com/containers/podman/issues/10262)).
- A new option, `--gpus`, has been added to `podman create` and `podman run` as a no-op for better compatibility with Docker. If the nvidia-container-runtime package is installed, GPUs should be automatically added to containers without using the flag.
- If an invalid subcommand is provided, similar commands to try will now be suggested in the error message.
  [#]## Changes
- The `podman system reset` command now removes non-Podman (e.g. Buildah and CRI-O) containers as well.
- The new port forwarding offered by `podman machine` requires [gvproxy](https://github.com/containers/gvisor-tap-vsock) in order to function.
- Podman will now automatically create the default CNI network if it does not exist, for both root and rootless users. This will only be done once per user - if the network is subsequently removed, it will not be recreated.
- The `install.cni` makefile option has been removed. It is no longer required to distribute the default `87-podman.conflist` CNI configuration file, as Podman will now automatically create it.
- The `--root` option to Podman will not automatically clear all default storage options when set. Storage options can be set manually using `--storage-opt` ([#10393](https://github.com/containers/podman/issues/10393)).
- The output of `podman system connection list` is now deterministic, with connections being sorted alpabetically by their name.
- The auto-update service (`podman-auto-update.service`) has had its default timer adjusted so it now starts at a random time up to 15 minutes after midnight, to help prevent system congestion from numerous daily services run at once.
- Systemd unit files generated by `podman generate systemd` now depend on `network-online.target` by default ([#10655](https://github.com/containers/podman/issues/10655)).
- The `podman info` command's logic for detecting package versions on Gentoo has been improved, and should be significantly faster.
  [#]## Bugfixes
- Fixed a bug where the `podman play kube` command did not perform SELinux relabelling of volumes specified with a `mountPath` that included the `:z` or `:Z` options ([#9371](https://github.com/containers/podman/issues/9371)).
- Fixed a bug where the `podman play kube` command would ignore the `USER` and `EXPOSE` directives in images ([#9609](https://github.com/containers/podman/issues/9609)).
- Fixed a bug where the `podman play kube` command would only accept lowercase pull policies.
- Fixed a bug where named volumes mounted into containers with the `:z` or `:Z` options were not appropriately relabelled for access from the container ([#10273](https://github.com/containers/podman/issues/10273)).
- Fixed a bug where the `podman logs -f` command, with the `journald` log driver, could sometimes fail to pick up the last line of output from a container ([#10323](https://github.com/containers/podman/issues/10323)).
- Fixed a bug where running `podman rm` on a container created with the `--rm` option would occasionally emit an error message saying the container failed to be removed, when it was successfully removed.
- Fixed a bug where starting a Podman container would segfault if the `LISTEN_PID` and `LISTEN_FDS` environment variables were set, but `LISTEN_FDNAMES` was not ([#10435](https://github.com/containers/podman/issues/10435)).
- Fixed a bug where exec sessions in containers were sometimes not cleaned up when run without `-d` and when the associated `podman exec` process was killed before completion.
- Fixed a bug where `podman system service` could, when run in a systemd unit file with sdnotify in use, drop some connections when it was starting up.
- Fixed a bug where containers run using the REST API using the `slirp4netns` network mode would leave zombie processes that were not cleaned up until `podman system service` exited ([#9777](https://github.com/containers/podman/issues/9777)).
- Fixed a bug where the `podman system service` command would leave zombie processes after its initial launch that were not cleaned up until it exited ([#10575](https://github.com/containers/podman/issues/10575)).
- Fixed a bug where VMs created by `podman machine` could not be started after the host system restarted ([#10824](https://github.com/containers/podman/issues/10824)).
- Fixed a bug where the `podman pod ps` command would not show headers for optional information (e.g. container names when the `--ctr-names` option was given).
- Fixed a bug where the remote Podman client's `podman create` and `podman run` commands would ignore timezone configuration from the server's `containers.conf` file ([#11124](https://github.com/containers/podman/issues/11124)).
- Fixed a bug where the remote Podman client's `podman build` command would only respect `.containerignore` and not `.dockerignore` files (when both are present, `.containerignore` will be preferred) ([#10907](https://github.com/containers/podman/issues/10907)).
- Fixed a bug where the remote Podman client's `podman build` command would fail to send the Dockerfile being built to the server when it was excluded by the `.dockerignore` file, resulting in an error ([#9867](https://github.com/containers/podman/issues/9867)).
- Fixed a bug where the remote Podman client's `podman build` command could unexpectedly stop streaming the output of the build ([#10154](https://github.com/containers/podman/issues/10154)).
- Fixed a bug where the `podman manifest create` command accepted at most two arguments (an arbitrary number of images are allowed as arguments, which will be added to the manifest).
- Fixed a bug where named volumes would not be properly chowned to the UID and GID of the directory they were mounted over when first mounted into a container ([#10776](https://github.com/containers/podman/issues/10776)).
- Fixed a bug where the remote Podman client's `podman exec -i` command would hang when input was provided via shell redirection (e.g. `podman --remote exec -i foo cat &lt;&lt;&lt;"hello"`) ([#7360](https://github.com/containers/podman/issues/7360)).
- Fixed a bug where containers created with `--rm` were not immediately removed after being started by `podman start` if they failed to start ([#10935](https://github.com/containers/podman/issues/10935)).
- Fixed a bug where the `--storage-opt` flag to `podman create` and `podman run` was nonfunctional ([#10264](https://github.com/containers/podman/issues/10264)).
- Fixed a bug where the `--device-cgroup-rule` option to `podman create` and `podman run` was nonfunctional ([#10302](https://github.com/containers/podman/issues/10302)).
- Fixed a bug where the `--tls-verify` option to `podman manifest push` was nonfunctional.
- Fixed a bug where the `podman import` command could, in some circumstances, produce empty images ([#10994](https://github.com/containers/podman/issues/10994)).
- Fixed a bug where images pulled using the `docker-daemon:` transport had the wrong registry (`localhost` instead of `docker.io/library`) ([#10998](https://github.com/containers/podman/issues/10998)).
- Fixed a bug where operations that pruned images (`podman image prune` and `podman system prune`) would prune untagged images with children ([#10832](https://github.com/containers/podman/issues/10832)).
- Fixed a bug where dual-stack networks created by `podman network create` did not properly auto-assign an IPv4 subnet when one was not explicitly specified ([#11032](https://github.com/containers/podman/issues/11032)).
- Fixed a bug where port forwarding using the `rootlessport` port forwarder would break when a network was disconnected and then reconnected ([#10052](https://github.com/containers/podman/issues/10052)).
- Fixed a bug where Podman would ignore user-specified SELinux policies for containers using the Kata OCI runtime, or containers using systemd as PID 1 ([#11100](https://github.com/containers/podman/issues/11100)).
- Fixed a bug where Podman containers created using `--net=host` would add an entry to `/etc/hosts` for the container's hostname pointing to `127.0.1.1` ([#10319](https://github.com/containers/podman/issues/10319)).
- Fixed a bug where the `podman unpause --all` command would throw an error for every container that was not paused ([#11098](https://github.com/containers/podman/issues/11098)).
- Fixed a bug where timestamps for the `since` and `until` filters using Unix timestamps with a nanoseconds portion could not be parsed ([#11131](https://github.com/containers/podman/issues/11131)).
- Fixed a bug where the `podman info` command would sometimes print the wrong path for the `slirp4netns` binary.
  [#]## API
- Fixed a bug where the Compat List endpoint for Containers included healthcheck information for all containers, even those that did not have a configured healthcheck.
- Fixed a bug where the Compat Create endpoint for Containers would fail to create containers with the `NetworkMode` parameter set to `default` ([#10569](https://github.com/containers/podman/issues/10569)).
- Fixed a bug where the Compat Create endpoint for Containers did not properly handle healthcheck commands ([#10617](https://github.com/containers/podman/issues/10617)).
- Fixed a bug where the Compat Wait endpoint for Containers would always send an empty string error message when no error occurred.
- Fixed a bug where the Libpod Stats endpoint for Containers would not error when run on rootless containers on cgroups v1 systems (nonsensical results would be returned, as this configuration cannot be supportable).
- Fixed a bug where the Compat List endpoint for Images omitted the `ContainerConfig` field ([#10795](https://github.com/containers/podman/issues/10795)).
- Fixed a bug where the Compat Pull endpoint for Images could fail, but return a 200 status code, if an image name that could not be parsed was provided.
- Fixed a bug where the Compat Pull endpoint for Images would continue to pull images after the client disconnected.
- Fixed a bug where the Compat List endpoint for Networks would fail for non-bridge (e.g. macvlan) networks ([#10266](https://github.com/containers/podman/issues/10266)).
- Fixed a bug where the Libpod List endpoint for Networks would return nil, instead of an empty list, when no networks were present ([#10495](https://github.com/containers/podman/issues/10495)).
- The Compat and Libpod Logs endpoints for Containers now support the `until` query parameter ([#10859](https://github.com/containers/podman/issues/10859)).
- The Compat Import endpoint for Images now supports the `platform`, `message`, and `repo` query parameters.
- The Compat Pull endpoint for Images now supports the `platform` query parameter.
  [#]## Misc
- Updated Buildah to v1.22.0
- Updated the containers/storage library to v1.33.1
- Updated the containers/image library to v5.15.0
- Updated the containers/common library to v0.42.1
- Update storage to 1.36.0
  1.36.0:
    (*Store)Layer(): fix race when loading layers
    Add Inodes to OverlayOptionsConfig
    build(deps): bump github.com/Microsoft/hcsshim from 0.8.20 to 0.8.22
    build(deps): bump github.com/containerd/stargz-snapshotter/estargz
    build(deps): bump github.com/klauspost/compress from 1.13.4 to 1.13.5
    build(deps): bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
    chunked: cache all the files with the same digest
    chunked: do not store the digest if it is empty
    chunked: estargz support
    chunked: fix linkat for rootless
    chunked: restrict dedup with hard links
  1.35.0:
    chunked: add new pull options use_hard_links and enable_partial_images
    build(deps): bump github.com/vbatts/tar-split from 0.11.1 to 0.11.2
    build(deps): bump github.com/opencontainers/runc from 1.0.1 to 1.0.2
    Update golang.org/x/sys
    Add LayerOptions.OriginalDigest and LayerOptions.UncompressedDigest
    Separate the IDMappingOptions logic from other LayerOptions work
    Reorganize uncompressedCounter
    Only compute {un,}compressedDigester.Digest() once
    Reorganize the "defragmented" reader construction a bit.
    Rename {un,}compressedDigest to {un,}compressedDigester
    Have NewReadCloserWrapper pass through io.WriterTo
    chunked: remove unused args
    chunked: fix fd leak on error
    chunked: remove unused argument missingDirsMode
    chunked: add new pull option use_hard_links
    chunked: allow to disable partial images feature
  1.34.1:
    types: on error fallback to filepath.Clean()
    build(deps): bump github.com/klauspost/compress from 1.13.3 to 1.13.4
    Add codespell fixes
    ApplyDiff: compress saved headers without concurrency
    build(deps): bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4
  1.34.0:
    overlay: check for aufs-style whiteout at startup
    Invert libsubid tag
  1.33.2:
    build(deps): bump github.com/BurntSushi/toml from 0.3.1 to 0.4.1
    Follow symlinks if they exists
    idtools: add support for libsubid
    Makefile: use buildtags for golangci-lint
    Cirrus: Use fresh VM &amp; Container images
    build(deps): bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3
    build(deps): bump github.com/klauspost/compress from 1.13.1 to 1.13.3
  1.33.1:
    Fix handling of quota on volumes
  1.33.0:
    Add inode support to quota
    Creating fifo files while non root should be supported
    Revert #952, we don't want to use /run/user on non systemd systems
    Split pkg/chunked.ZstdCompressor into a separate subpackage
    Update docs/containers-storage.conf.5.md
    build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
    overlay: check if we can mknod() kernel whiteout
- Update image to 5.16.0
  v0.44.0:
  * Add HelperBinariesDir field to engine config
  * Add space trimming check in sysctl.Validate
  * Cirrus: Use fresher VM images
  * Fix `pkg/sysctl` path typo
  * Fix the fallback runtime path
  * Switch default Rootless Networking to "CNI" for OSX
  * Update pkg/sysctl/sysctl.go
  * add some cni plugin paths
  * build(deps): bump github.com/containers/image/v5 from 5.15.0 to 5.16.0
  * build(deps): bump github.com/containers/storage from 1.34.0 to 1.35.0
  * build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.16.0
  * build(deps): bump github.com/opencontainers/runc from 1.0.1 to 1.0.2
  * build(deps): bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
  * docs/containers.conf.5.md: Fix manpage section
  * fix untag + v0.43.2
  * libimage: disk usage: catch corrupted images
  * libimage: relax untag by digest checks
  * path: dest paths inside container should always be treated as *nix type
  * remove-image: Add optional `LookupManifest` to RemoveImagesOptions.
  * runtime: Add ReturnManifestIfPresent to LookupImageOptions
  * runtime: Add `ManifestList` to `LookupImageOptions`
  * seccomp: allow memfd_secret
  v0.43.2:
  * libimage: relax untag by digest checks
  * path: dest paths inside container should always be treated as *nix type
  v0.43.1:
  * Fix spelling mistakes
  * Fix examples in containers.conf
  v0.43.0:
  * Add documentation for Containerfile and Dockerfile
  * Remove no_libsubid flag
  * Add machine_image to containers.conf
  * build(deps): bump github.com/containers/storage from 1.33.1 to 1.34.0
  * build(deps): bump github.com/opencontainers/selinux from 1.8.2 to 1.8.4
  * Add machine_image to containers.conf
  * Switch default logdriver and eventslogger to journald, if root
  * build(deps): bump github.com/BurntSushi/toml from 0.3.1 to 0.4.1
  * build(deps): bump github.com/onsi/gomega from 1.14.0 to 1.15.0
  * libimage: {un}tag: reject digests
  * build(deps): bump github.com/docker/docker from 20.10.7+incompatible to 20.10.8+incompatible
  * style: complete containers#556 to-do list part 4
  * build(deps): bump github.com/containers/image/v5 from 5.14.0 to 5.15.0
  * set GOPROXY=https://proxy.golang.org
  v0.42.1:
  * pull: fallthrough for registry parsing errors
  v0.42.0:
  * Remove --accept-repositories flag
  * pull policy: support camel cases
  * Use authfile in options to search image
  * vendor in containers/storage v1.33.0
  * config: split arguments in DBUS_SESSION_BUS_ADDRESS
  * pkg/seccomp: avoid DefaultErrnoRet: null
  * Add and use libimage.Runtime.imageIDsForManifest()
  * Add libimage/manifests.LockerForImage()
  * Add support for path based registry in login/logout
  * libimage: pull: normalize docker-daemon
  * libimage: report all removed images
  * libruntime: layer tree: handle empty images
  * refine dangling filters
  * libimage.RuntimeFromStore(): stop overriding the BlobInfoCache location
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * pull with custom platform: handle "localhost/"
  * User option to prepare container after creation for volume copy-up. Docker does this by default.
  * add config option for ChownCopiedFiles
  * build(deps): bump github.com/containers/storage from 1.32.5 to 1.32.6
  * libimage: image tree: fix nil deref</changelog>
</package>
<package pkgid="70d2cf5d37c211faebfcfdf8c9b92cc910f53a77d7efe806f62f863e4ab66349" name="libcpupower0" arch="x86_64">
  <version epoch="0" ver="5.10" rel="3.6.1"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
  D tools-power-turbostat-Support-AMD-Family-19h.patch
  Already included  in the mainline sources now
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1624276800">- jsc#SLE-17797 cpupower updates for Milan
  All patches have been fetched from mainline git repo:
  A    cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  A    cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  A    cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  A    cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  A    cpupower-Remove-family-arg-to-decode_pstates.patch
  A    cpupower-Remove-unused-pscur-variable.patch
  A    cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  A    cpupower-Update-msr_pstate-union-struct-naming.patch</changelog>
  <changelog author="trenn@suse.de" date="1639483200">- bsc#1193557 - fixes:
  turbostat(version 20.09.30) started then immediately exit on AMD Zen machines
  A tools-power-turbostat-Fix-turbostat-for-AMD-Zen-CPUs.patch</changelog>
</package>
<package pkgid="4e86663d2ebb1479e73e7d4e6aa2338976e328b10ccf1cb1716e6f579b76d1bb" name="libcrack2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="11.6.1"/>
  <changelog author="mpluskal@suse.com" date="1439899200">- Update to 2.9.5
  * fix matching against first password in dictionary (Anton Dobkin)
- Changes for 2.9.4
  * remove doubled prototype
- Changes for 2.9.3
  * expose additional functions externally</changelog>
  <changelog author="hguo@suse.com" date="1471262400">- Relabel patches:
  cracklib-magic.diff -&gt; 0001-cracklib-magic.diff
  cracklib-2.9.2-visibility.patch -&gt; 0002-cracklib-2.9.2-visibility.patch
- Add patch 0003-overflow-processing-gecos.patch
  to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318)</changelog>
  <changelog author="hguo@suse.com" date="1471435200">- Add patch 0004-overflow-processing-long-words.patch
  to fix a new buffer overflow identified together with bsc#992966.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Only buildrequire and call translation-update-upstream on SLE:
  the package in openSUSE is a dummy and is empty.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 2.9.6
  * fix issue with sort and locale
  * some particularly bad cases to the cracklib small dictionary
  * updates to cracklib-words (adds a bunch of other dictionary lists)
  * migration to github
- run spec-cleaner</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pgajdos@suse.com" date="1588766400">- use /usr/lib instead of %{_libexecdir}, %{_libexecdir} should
  contain internal binaries, not data</changelog>
  <changelog author="mgorse@suse.com" date="1590148800">- Enable translation-update-upstream on leap, to remove the use of
  is_opensuse (jsc#SLE-12096).</changelog>
  <changelog author="mgorse@suse.com" date="1591099200">- Update to version 2.9.7:
  + fix a buffer overflow processing long words.
- Drop 0003-overflow-processing-gecos.patch and
  0004-overflow-processing-long-words.patch: fixed upstream.
- Update source URI.
- Remove use of translation-update-upstream. It cannot be added to
  ring 0 on leap, and 2.9.7 has some translation fixes
  (bsc#1172396).</changelog>
  <changelog author="pgajdos@suse.com" date="1636718400">- %check: really test the package [bsc#1191736]</changelog>
</package>
<package pkgid="2edb9bf75fe57a17fee02ee1858bf9c06b4f569a59bf8cd4e193bd78b16a4506" name="libcroco-0_6-3" arch="x86_64">
  <version epoch="0" ver="0.6.13" rel="3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1450353600">- Update to version 0.6.11:
  + Fix regression in cr_tknzr_consume_chars.
  + Misc bug fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1492689600">- Update to version 0.6.12:
  + Add support for Visual Studio 2017.
  + Misc bug fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1497268800">- Add libcroco-fix-CVE-2017-7960.patch: Fix boo#1034481,
  CVE-2017-7960.
- Add libcroco-fix-CVE-2017-7961.patch: Fix boo#1034482,
  CVE-2017-7961.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507377600">- Drop gtk-doc BuildRequires: Do not build documentation (helps
  eliminate a build cycle). This is no loss for the package, as we
  simply install the pre-built doc from the tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Remove --with-pic which is useless with --disable-static.
- Rectify RPM groups. Remove redundant %clean section.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554552000">- Update to version 0.6.13:
  + Visual Studio builds: Enhance security of x64 binaries.
  + win32/replace.py: Fix replacing items in files with UTF-8
    content.
  + tknzr: support only max long rgb values.
  + input: check end of input before reading a byte.
- Drop upstream fixed patches:
  + libcroco-fix-CVE-2017-7960.patch.
  + libcroco-fix-CVE-2017-7961.patch.
- Stop exporting -fno-strict-aliasing" to configure, no longer
  needed.
- Update URL to new gitlab home.</changelog>
  <changelog author="mgorse@suse.com" date="1556798400">- Add libcroco-CVE-2017-8834.patch: fix infinite loop on invalid
  UTF-8 (boo#1043898 boo#1043899 bgo#782647 CVE-2017-8834
  CVE-2017-8871).</changelog>
  <changelog author="mgorse@suse.com" date="1629115200">- Add libcroco-CVE-2020-12825.patch: limit recursion in block and
  any productions (boo#1171685 CVE-2020-12825).</changelog>
</package>
<package pkgid="a39816db9f0604b134ffdb872798a632b7d5e8bbacf9950b754785d440c39253" name="libcrypt1" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.2.41"/>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
</package>
<package pkgid="8a15fd1263575b958789c4b49ac87fde6f733c92181861b4b202c8fd6d526dc0" name="libcryptsetup12" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="150300.3.5.1"/>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="lnussel@suse.de" date="1641902400">- reencrypt evil maid fixes (bsc#1194469, CVE-2021-4122,
  0001-CVE-2021-4122-fix.patch).</changelog>
  <changelog author="lnussel@suse.de" date="1642420800">- cryptsetup 2.3.7:
  * Fix possible attacks against data confidentiality through LUKS2 online
  reencryption extension crash recovery (CVE-2021-4122).
  * Improve internal metadata validation code for reencryption metadata.
  * Add updated documentation for LUKS2 On-Disk Format Specification</changelog>
</package>
<package pkgid="19ef43b4631b28cb13833aeb91254215bf14859e3a8f46fc4fcd8f94197755d3" name="libcryptsetup12-hmac" arch="x86_64">
  <version epoch="0" ver="2.3.7" rel="150300.3.5.1"/>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="lnussel@suse.de" date="1641902400">- reencrypt evil maid fixes (bsc#1194469, CVE-2021-4122,
  0001-CVE-2021-4122-fix.patch).</changelog>
  <changelog author="lnussel@suse.de" date="1642420800">- cryptsetup 2.3.7:
  * Fix possible attacks against data confidentiality through LUKS2 online
  reencryption extension crash recovery (CVE-2021-4122).
  * Improve internal metadata validation code for reencryption metadata.
  * Add updated documentation for LUKS2 On-Disk Format Specification</changelog>
</package>
<package pkgid="46392b653e5dd332de11459743625c9285eacc8d8d1d8dc7c4d27249a3988b07" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="3.26.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="126119657c4583393ee347d6807925547d0c34d88b0bee2103a3ca2849332ff6" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.27.1"/>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1626091200">- Security fix: Disable the metalink feature:
  * Insufficiently Protected Credentials [bsc#1188218, CVE-2021-22923]
  * Wrong content via metalink not discarded [bsc#1188217, CVE-2021-22922]</changelog>
  <changelog author="pmonreal@suse.com" date="1626091201">- Security fix: [bsc#1188219, CVE-2021-22924]
  * Bad connection reuse due to flawed path name checks
  * Add curl-CVE-2021-22924.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1626177600">- Security fix: [bsc#1188220, CVE-2021-22925]
  * TELNET stack contents disclosure again
  * Add curl-CVE-2021-22925.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1631534400">- Security fix: [bsc#1190373, CVE-2021-22946]
  * Protocol downgrade required TLS bypassed
  * Add curl-CVE-2021-22946.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1631534401">- Security fix: [bsc#1190374, CVE-2021-22947]
  * STARTTLS protocol injection via MITM
  * Add curl-CVE-2021-22947.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632312000">- MIME: Properly check Content-Type even if it has parameters
  * Add curl-check-content-type.patch [bsc#1190153]</changelog>
</package>
<package pkgid="871c964c2a01c64305298358db9815ec3a5be3c5b2100d1860066c44330b946d" name="libdaemon0" arch="x86_64">
  <version epoch="0" ver="0.14" rel="1.23"/>
  <changelog author="seife@suse.de" date="1227787200">- fix compiler warning (bnc#449728)</changelog>
  <changelog author="seife@suse.de" date="1227787201">- update to version 0.13:
  - add daemon_reset_sigs() and daemon_unblock_sigs()
  - improve error handling
- obsoletes bnc-309132.patch, libdaemon-0.10-testd-fix-FD_SET.diff</changelog>
  <changelog author="seife@suse.de" date="1233057600">- mark filedescritor as closed after closing it, preventing
  application errors in e.g. avahi (bnc#469342, bnc#442210)
  Thanks to Stefan Thaeter for providing the patch.</changelog>
  <changelog author="crrodriguez@suse.de" date="1233748800">- move shared libraries to /%{_lib} so ifplugd can use them
- remove static libraries again</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="vuntz@opensuse.org" date="1286280000">- Update to version 0.14:
  + add daemon_set_verbosity() call
  + make daemon_nonblock() actually work
  + numerous updates
  + build fixes
- Drop libdaemon-0.12-bnc449728.diff,
  libdaemon-0.13-bnc469342.diff: fixed upstream.
- Improve descriptions.
- Do not set CFLAGS since we use %configure.
- Use %makeinstall.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328961600">- Move library back to %{_libdir}, /usr merge project.</changelog>
  <changelog author="mpluskal@suse.com" date="1426075200">- Cleanup spec file with spec-cleaner
- Use url for source</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
</package>
<package pkgid="70c378951b98c03c3a5c8c78db077df3d881395a282ab9a4a481ae279bfbdab0" name="libdatrie1" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="1.25"/>
  <changelog author="crrodriguez@suse.de" date="1235044800">- remove static libraries</changelog>
  <changelog author="vuntz@opensuse.org" date="1262606400">- Update to version 0.2.2:
  + Support building with linkers without symbol versioning
    supports, including Mac, Cygwin, MinGW.
  + Support other iconv implementations than that's in glibc, for
    Mac and MinGW.
- Changes from version 0.2.1:
  + Fix errors in documentation
  + Symbol versioning to ease upgrade across SONAME
  + Minor cleanups
- Changes from version 0.2.0:
  + New APIs for performance: trie_state_copy(),
    trie_state_is_single()
  + Clean-ups
- Changes from version 0.1.99.2:
  + More robust handling of alphabet ranges
  + Allow co-existence with libdatrie0
- Changes from version 0.1.99.1:
  + Breaking ABI with libdatrie0
  + More capacity with 32-bit node index
  + Adjusted API for non-file trie usage
  + All data in one file, no more *.br and *.tl split
  + Drop SBTrie wrapper; all features are merged into Trie
  + Domain characters are now Unicode</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="vuntz@opensuse.org" date="1284897600">- Update to version 0.2.4:
  + Close file on saving trie.
  + Add trie_store_if_absent() API which fails on adding duplicated
    key. This is useful for preventing race condition in
    multi-thread applications.
  + Add trie_fread() and trie_fwrite() APIs for reading/writing
    trie data in an open file, allowing trie to be embeded as part
    of a bigger file.
- Changes from version 0.2.3:
  + More robustness against corrupted trie files.
  + License clarification in individual source files.</changelog>
  <changelog author="vuntz@opensuse.org" date="1298462400">- Add missing baselibs.conf.</changelog>
  <changelog author="jengelh@medozas.de" date="1328097600">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags</changelog>
  <changelog author="mmeister@suse.com" date="1365681600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 0.2.8
  * Fix compiler warnings in test suites.
  * Fix edge-case error on alphabet set of size 255.
  * Fail trie operations on non-alphabet inputs, rather than silently
    allowing them to sneak in as false keys.
  * Improved documentation.
- Add xz build require to keep SLE11 support</changelog>
  <changelog author="dimstar@opensuse.org" date="1439899200">- Add libdatrie-doxygen-found-is-enough.patch: when we find
  doxygen, we assume it is new enough. The configure script uses
  'expr 1.8.4 \&lt; $DOXYGEN_VER', which returns false for 1.8.10.
- For safeguard, we specify the minimal required version of
  doxygen (1.8.4) in the buildrequirements.</changelog>
  <changelog author="pgajdos@suse.com" date="1439899201">- update to version 0.2.9
  * Fix infinite loop on empty trie iteration.
  * Document about alphabet size.
  * Disable timestamp in Doxygen-generated doc.
  * etc. see ChangeLog
- remove libdatrie-doxygen-found-is-enough.patch in favour of
  libdatrie-doxygen-version-check.patch</changelog>
</package>
<package pkgid="84dd52fb53b0859349203088479262fed552b18de6a3ac054d8cb533eee15628" name="libdb-4_8" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="7.3.1"/>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
</package>
<package pkgid="40d25d8112882eedffc065022938dc1fe3145705718ff49bebe6b2714b5ee3bf" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="8.11.2"/>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
</package>
<package pkgid="891ecf92fdeec2ac98b31767276fec0d4e5c78e527065d3b6ac0bb2a9b79c581" name="libdbusmenu-glib4" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="1.12"/>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="c4922e10e6a4bd7ddf4d0104d770e8eb87b768ba675c19acf1eabfdd3d3d00a2" name="libdbusmenu-gtk3-4" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="1.13"/>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="7b682685f704dfa55c94b90c51862165816f72dd5f21f72af0196e93ee658243" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.39.1"/>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
</package>
<package pkgid="f40889a10de23cde08f20b5c8dfb7ac4b5e0095ca39ada8a11e1366e05dcdd0c" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="8.39.1"/>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
</package>
<package pkgid="0642d3cbb05eb0cbf4fcff4a9c6c3409d10cd0989eb9801920836ccbf18f5b8c" name="libdhash1" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="scabrero@suse.de" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="05b5b6bf6b6a30dc6d7d10430f436abde930b58858d850ff5f046df3618a30db" name="libdialog14" arch="x86_64">
  <version epoch="0" ver="1.3" rel="3.3.7"/>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 1.2-20130928
  + fix a regression in gauge widget from 1.2-20130928 changes;
    dlg_reallocate_gauge() failed when no --title option was given
- Changes from 1.2-20130923
  + fix samples/inputbox6-utf8, which had depended unnecessarily on bash.
  + improve memory caching for wide-character manipulation in gauge
    widget
  + add dlg_reallocate_gauge
  + updated configure macros to use msys changes from ncurses.
  + update config.guess, config.sub
- Changes from 1.2-20130902
  + modify makefile rule to make the ".png" filenames created by groff
    predictable.
  + add option --help-tags to allow scripts to get the item's tag field
    consistently from help- and help-item button results rather than
    getting the item's text for the latter
  + correct manpage discussion of DIALOG_ITEM_HELP versus --item-help,
    as well as --help-button return status
  + correct limit used for --hline option
  + do not print empty "[]" if a --hline option was given with an empty
    value
  + miscellaneous configure script fixes/updates.  In particular, add
    option --with-shared which builds shared libraries without a libtool
    dependency.
  + add FreeBSD port-files for test-builds.
  + update lt.po, add fa.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
- Changes from 1.2-20130523
  + modify ifdef in arrows.c to work around packages which use the
    wide-character ncursesw headers with the ncurses library
  + correct workaround for xterm alternate-screen to work with/without
    the fix made in ncurses that makes putp() always write to the
    standard output (Debian #708829).
  + improve limit-checks for checklist, in case the dialog is resized
  + add --last-key option ( Debian #697607).
- Changes from 2013/03/15
  + update zh_TW.po, add an.po from
    http://translationproject.org/latest/dialog/
- Remove dialog-libs.patch; fixed on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1420372800">- Update to version 1.2-20140911
  + correct malloc-size for change to prgbox.</changelog>
  <changelog author="werner@suse.de" date="1425470400">- Update to version 1.2-20150225
  + modify gauge widget to keep from erasing a second gauge widget, e.g.,
    via the "--and-widget" option.  This is a cosmetic change to match
    behavior of dialog 1.0 (report by Jason Orendorf).
  + add configure option "--with-man2html"
  + add configure options for versioned symbols, from ongoing work on
    ncurses.
  + update configure macros, e.g., for shared libraries
- Changes from 1.2- 20150125
  + suppress highlighting of character which denotes an abbreviation or
    shortcut for the OK/Cancel and other buttons for these widgets, which
    use abbreviations for the list shown on the screen:  buildlist,
    checklist/radiobox, menubox, treeview (Debian #775295).
  + add grid up/left and down/right bindings in editbox.c as synonyms for
    field prev and next, respectively when handling the OK/Cancel buttons
    (Debian #775294).</changelog>
  <changelog author="werner@suse.de" date="1425556800">- Hack around bug in libtool as it seems to be broken in shell
  function func_lalib_unsafe_p() as this does only work if a
  file descriptor 0 exists.</changelog>
  <changelog author="mpluskal@suse.com" date="1432296000">- Add gpg signature
- Update to 1.2-20150513
  + add configure option --with-install-prefix, like ncurses.
  + add --with-screen and related configure options from ncurses-examples
    to allow building with ncurses6 test-packages.
  + update configure macros for improved coding style from lynx changes.
  + updated ro.po from
    http://translationproject.org/latest/dialog/
  + update config.guess, config.sub
  &gt; patches by Florent Rougon:
  + fix two bugs in the "--file" option.
    + When the number of arguments read from the included file is 0, the
    code used to just skip over '--file' and its argument instead of
    removing them from the argument list, causing "Error:  Unknown
    option --file" later on.
    + In the alternative case (at least one argument read from the file),
    the previous code used to do '--j;' in order to "force rescan" of
    the inserted arguments.  However, control then flowed to outer
    blocks where a '++j;' counteracted this measure, causing "Error:
    Unknown option --msgbox" (for instance) later on.
  + modify escaping in argv.c to be more uniform, whether or not the
    backslash is found within a parameter.</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 1.2-20150920
  * decrease table value for minimum number of arguments for the
    widgets which use --no-items option
  * update configure macros:
    + use $SHELL consistently, deprecate non-POSIX shell
    + PKG_CONFIG may simply be unset - fix
    + add option to allow changing ABI version, from ncurses6.
  * fixes for two autoconf macros, CF_ADD_INCDIR and
    CF_NCURSES_CONFIG from work on ncurses.
  * build-fix for NetBSD curses
- Fix typo in previous changelog entry</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 1.3-20160209
  * modify editbox widget to add a trailing newline if the text
    has none to ensure the last line is not ignored (report by
    Florent Rougon).
  * change mouse initialization to look for button-presses rather
    than button-clicks, for better response.
  * modify dump_curses_key() to show mouse-coding in readable form.
  * correct mapping of mouse-clicks on the day-grid in calendar
    widget when "--week-start" is used to set the start of the week
    (report by Stefan Vogtner).
  * integrated changes from Stefan Vogtner:
  * use Gregorian algorithm for leap year
  * use mktime if available; calendar was written just as it became
    standard.
- Changes for version 1.3
  * correct --infobox documentation, which said it shows an OK
    button.
  * fix a couple of place in test-scripts which referred to
    $SIG_TRAP rather than $SIG_QUIT
  * reorganize dialog.3, to use subsections for generating navigation
    pane, using man2html
  * add "--week-start" option for calendar widget (prompted by
    discussion with Stefan Vogtner).
  * add a limit-check in editbox.c to ensure that mouse-clicks
    outside the filled-in text area do not access past the end of
    the array (report by Stefan Vogtner).
  * update configure macros from ncurses changes.
  * update config.guess, config.sub</changelog>
  <changelog author="p.drouand@gmail.com" date="1488888000">- Update to version 1.3-20170131
  * use DLG_TRACE macro consistently to make "--disable-trace" configure
  option work.
  * modify buildlist widget to support option "--reorder" for to allow
    user to reorder the data based on the sequence of selections
    (discussion with Paraic O'Ceallaigh).
  * fill background color on unused parts of buildlist.
  * fix a minor error in buildlist which let pageup switch columns.
  * change several calls to dlg_trace_msg to prefix with "#" to make
    the trace logs more consistent for parsing.
  * add samples/run_test.sh
  * further improve performance with very long command-lines by changes
    to howmany_tags().
  * modify dlg_string_to_argv() to convert escaped double-quotes to
    plain double-quotes when within a double-quoted string.
  * modify makefile to apply CFLAGS to linking
  * modify dlg_string_to_argv() to ignore escaped newlines except when
    quoted, fixing a problem with samples/checklist9.
  * interpret $DIALOGOPTS before expanding "--file", etc., to allow
    the environment variable to turn on tracing in that process.
  * improve performance when processing very long command lines, e.g.,
    using "--file" by changing dialog_opts[] to an array of pointers to
    the expanded argv[] (discussion with Lars Tauber).
  * modified autoconf macros
    + CF_CC_ENV_FLAGS amend the last change to move only the
    preprocessor, optimization and warning flags to CPPFLAGS and
    CFLAGS, leaving the residue in CC.  That happens to work for gcc's
    various "model" options, but may require tuning for other compilers
    + CF_LARGEFILE workaround for clang exit-code vs warnings
    + CF_MATH_LIB quiet strict gcc warning
    + CF_WITH_LIBTOOL fix a few places in configure/build scripts where
    DESTDIR and rpath were combined
    + CF_XOPEN_SOURCE add "uclinux" to list of Linux's
  * update config.guess, config.sub</changelog>
  <changelog author="mpluskal@suse.com" date="1496750400">- Update to version 1.3-20170509:
  * improved configure macros CF_ADD_CFLAGS, CF_CC_ENV_FLAGS, and
  CF_SHARED_OPTS.
  * updated hu.po and tr.po from
  http://translationproject.org/latest/dialog/
  * update config.guess, config.sub</changelog>
  <changelog author="werner@suse.de" date="1527595200">- Update to version 1.3-20171209
  + update ftp url in test-packages.
  + modify test-packages to use recommended compiler/linker flags.
  + improved configure macros AM_WITH_NLS, CF_CC_ENV_FLAGS,
    CF_CURSES_LIBS, CF_NCURSES_CONFIG, CF_SHARED_OPTS, CF_WITH_LIBTOOL,
    CF__INTL_BODY.
  + update config.guess, config.sub
- Add patch textbox-file_size.patch to fix bug bsc#1094836</changelog>
</package>
<package pkgid="5a0cb8aac87163ddc1099da4431f05655ab9c5e133478948aacae23b85ad0478" name="libdrm2" arch="x86_64">
  <version epoch="0" ver="2.4.104" rel="1.12"/>
  <changelog author="sndirsch@suse.com" date="1556020800">- Update to version 2.4.98
  * This release adds marketing names for AMDGPU devices, a
    fallback path in drmDevice for devices lacking OF data
    and drmIsMaster API, amongst other changes.</changelog>
  <changelog author="sndirsch@suse.com" date="1562155200">- Update to version 2.4.99
  * bug fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1572436800">- Update to version 2.4.100
  * bugfixes (boo#1155382)</changelog>
  <changelog author="sndirsch@suse.com" date="1573128000">- This release includes support for latest Intel GPUs
  (jsc#SLE-7962, jsc#SLE-8024, jsc#SLE-8022, jsc#SLE-10182,
  jsc#SLE-4989, jsc#SLE-4983, bsc#1137515)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1587384000">- upgrade to version 2.4.101
  * adds some new AMD GPUs</changelog>
  <changelog author="sndirsch@suse.com" date="1590580800">- upgrade to version 2.4.102
  * lots of FreeBSD and modetest stuff</changelog>
  <changelog author="sndirsch@suse.com" date="1598875200">- version 2.4.102 needed for jira#SLE/SLE-12880, jira#SLE/SLE-12882</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.103:
  * xf86drm.c: Use integer logarithm.
  * amdgpu: only enable security tests on raven family
  * amdgpu: sync up amdgpu_drm.h with latest from kernel
  * amdgpu: add marketing names from 20.40
  * intel: add INTEL_DG1_IDS to the pciids list
  * amdgpu: add device IDs for Raven, Picasso and Renoir
  * intel: sync i915_pciids.h with kernel
  * amdgpu: Add Device IDs for Embedded Raven2 platforms
  * intel: sync i915_pciids.h with kernel
  * xf86drm.c: fix build failure
  * core: use `O_RDONLY` instead of ambiguous `0` flag
  * lots of tests/amdgpu updates</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.104:
  * headers: drm: Sync with drm-next
  * Remove outdated comments about stdint.h
  * Remove definitions duplicated from drm_mode.h
  * xf86drmMode.h use ANSI C99 arrays
  * Document drmModeConnection
  * man: convert to reSTructuredText
  * testsuite fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1611489601">- reenabled build of manual pages (switch from xsltproc to rst2man)</changelog>
</package>
<package pkgid="4a4f4f4ec1f222f0dba2b60d48269825dca5989820d3d55e1a8d238717e4dee1" name="libdw1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="4.5.3"/>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="jmoreira@suse.com" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="56a34bf94a9921f4587c70de11353bb09115f15b16e9f95870690606f4704c4d" name="libebl-plugins" arch="x86_64">
  <version epoch="0" ver="0.168" rel="4.5.3"/>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="jmoreira@suse.com" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="2b9593b65c0d6114dd43ca6406cd596a0f656531633053a7b4026f0b9ff112d9" name="libebtc0" arch="x86_64">
  <version epoch="0" ver="2.0.11" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 2.0.11
  * Add --noflush command line support for ebtables-restore
  * Do not print IPv6 mask if it is all ones
  * Allow RETURN target rules in user defined chains
  * ebt_ip: add support for matching ICMP type and code
  * ebt_ip: add support for matching IGMP type
  * extensions: Add string filter to ebtables
  * Print IPv6 prefixes in CIDR notation
  * extensions: Add AUDIT target
  * Fix incorrect IPv6 prefix formatting
- Drop ebtables-v2.0.8-makefile.diff (no longer needed)
- Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch
  (not applicable)
- Drop ebtables-v2.0.10-4-audit.patch,
  0001-fix-compilation-warning.patch,
  0001-Use-flock-for-concurrent-option.patch,
  0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1575979200">- add ebtables.keyring as a Source</changelog>
  <changelog author="kstreitova@suse.com" date="1578657600">- rename /usr/lib/ebtables helper file to /usr/lib/ebtables-helper
  otherwise it conflicts with /usr/lib/ebtables library directory
  on 32-bit systems [bsc#1159769]</changelog>
  <changelog author="kukuk@suse.com" date="1588161600">- Use /bin/sh for ebtables.systemd
- Don't hard require systemd, we don't need that in a container</changelog>
  <changelog author="kukuk@suse.com" date="1588680000">- Revert last /bin/bash -&gt; /bin/sh change</changelog>
  <changelog author="kstreitova@suse.com" date="1598961600">- replace /usr/lib with /usr/libexec in .service files to follow
  %_libexecdir macro changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1599048000">- Have the source .service file hold a placeholder for LIBEXECDIR,
  which we replace during build/install phase, allowing the package
  to be used no matter what value %{_libexecdir} has.</changelog>
</package>
<package pkgid="46aba9251726604fcc47ccfd0182c946f3d16a2dc546c52963a38eb4c120198a" name="libeconf0" arch="x86_64">
  <version epoch="0" ver="0.4.4+git20220104.962774f" rel="150300.3.6.2"/>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
</package>
<package pkgid="64d40ebfd6c55d7a31019dd2dddd4a38fc415048effd3aee48740b7ebfbf8e25" name="libedit0" arch="x86_64">
  <version epoch="0" ver="3.1.snap20150325" rel="2.12"/>
  <changelog author="jengelh@medozas.de" date="1321185600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329998400">- Update to version 20110802, fix use after free triggerable
  with sftp autocompletion and MALLOC_PERTURB set.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1331640000">-  open all FDs with O_CLOEXEC in the library code.
-  use gcc visibility by just reusing upstream macros "public"
  and "protected"</changelog>
  <changelog author="mrueckert@suse.de" date="1406548800">- update to 20140620-3.1
  upgrade to fix a crash with clear_history e.g. in php.
  - Bounds search for reallocated index, from OpenBSD via Andreas
    Fett
  - PR/48957: Federico G. Schwindt: Restore commented out code that
    broke rl_callback_handler.
  - cast gotsig because it is long on some systems.
  - Add stdlib.h for abort() (Jess Thrysoee)
  - Don't depend on weak aliases to define the vi "alias" expansion
    function, provide an API instead to set it.
  - accomodate FreeBSD's flavor of weak references.
  - remove remaining makefile support for GCC &lt; 45 that i found.
  - PR/48876: Dmitriy Grigoryev: Core dump in readline lib on
    attempted expansion Make sure we have 2 matches before calling
    strcmp().
  - Always NULL terminate the argv[] array. From OpenBSD.
  - PR/48821: If called from tty_stty(), recalculate flags.
  - more tty modes refactoring, no functional change intended.
  - Factor out some common code (more to be done) from PR/48821
  - Add An to authors. Wording.
  - Add a history function that takes a FILE pointer; needed for
    Capsicum. From Eitan Adler
  - Add missing EL_REFRESH
  - ... if called prior to using_history().  This needed to be
    worked around in PHP:
    http://git.php.net/?p=php-src.git;a=commitdiff;h=31d67bd3
  - get rid of PATH_MAX.
  - cast to avoid warning.
  - Add a function to move the cursor.
  - expose rl_catch_signals and explain what we are doing.
  - Test early for EOF to avoid infinite loop in the wide char
    case. From Linas Vepstas: linasvepstas at gmail dot com
  - provide an el_init_fd function.
  - explicitly pass (void *)0 instead of NULL.
  - Add FILES section. From jmc@OpenBSD.
  - In 2000, .editrc reading from $PWD was removed. Update the man
    page. From LEVAI Daniel via jmc@OpenBSD.
  - remove dead assignment (Christoph Mallon)
  - Fix pasto that affected bind -k (Christoph Mallon)
  - Add trailing NULL's to the varargs functions as required. (John
    Spencer)
  - PR/46945: Steffen Nurpmeso; el_getc() doesn't document it's
    setting errno
  - return !OKCMD on error.
  - PR/46942: Steffen Nurpmeso: editline(3): el_get(): fix
    UNBUFFERED return
  - PR/46941: Steffen Nurpmeso: document EL_BUFFERED
  - PR/46935: Steffen Nurpmeso: editline(3) (libedit): faulty errno
    handling, faulty reuse of val in wrong context
  - Don't depend on HAVE_GCC being always defined.
  - From Kamil Dudka: fix crash of el_insertstr() on incomplete
    multi-byte
  - PR/46678: Ian Wienand: Add stub implementation for
    rl_free_line_state()
  - don't crash if add_history is called from an empty line. Called
    from nslookup in new bind. XXX: pullup to 6
  - Switch from Op to Oo/Oc for nested block.
  - remove stdint.h; it is not used.
  - don't include both term.h and termcap.h
  - define the new variable
  - Add rl_completion_word_break_hook from:
    http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/\
    5ec6a45fa762b8cbd0305ca06acb8780335a486a
  - save and restore the tty settings on entry and exit
    respectively. cleanup debugging printfs.
  - From: Jilles Tjoelker: Add a mapping for the cursor delete key
  - From Jilles Tjoelker: Do not move the cursor for
    ed-delete-next-char in emacs mode. This makes
    ed-delete-next-char suitable for mapping to the &lt;Delete&gt; key.
    Behaviour in vi mode is unchanged (for 'x').
  - These directories default to WARNS?=5
  - Use C89 functions definitions.
  - Use C89 functions definitions. Remove use of __P
  - include the NULL in the argv conversion
  - use arraycount
  - PR/45843: Henning Petersen: Fix resource leak on error.
  - Add coverity annotations about unreachable code (Kamil Dudka)
  - Add missing *
  - Initialize termbuf (Kamil Dudka)
  - Initialize res (Kamil Dudka)
  - check for negative return of ct_visual_char (Kamil Dudka)
  - Off by one in allocation could cause buffer overflow (Kamil
    Dudka)
  - remove unrecheable code (Kamil Dudka)
  - easier with an int for now.
  - Since Width() is used only for display purposes we don't want
    to pass -1 for unprintable characters.
  - Fixed misplaced parenthesis (Nirbhay Choubey)
  - fixed warnings where wint_t is unsigned.
  - fix broken change (parenthesis in the wrong place). From
    Nirbhay Choubey
  - include &lt;wchar.h&gt; if we don't have wcsdup()
  - NULL does not need a cast, here
  - re-enable -Wconversion</changelog>
  <changelog author="mrueckert@suse.de" date="1406548801">- rename README.SUSE (bnc#889029)</changelog>
  <changelog author="mpluskal@suse.com" date="1424952000">- Update to 20141030-3.1
  * version-info: 0:52:0
  * all: sync with upstream source
  * configure.ac: Fix posix shell portability issue.</changelog>
  <changelog author="idonmez@suse.com" date="1434715200">- Update to 20150325-3.1
  * version info: 0:53:0
  * all: sync with upstream source</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Cleanup a bit with spec-cleaner
  * remove pkg_name variable which is equal to name variable</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]
- Move development docu into -devel subpackage</changelog>
  <changelog author="dmueller@suse.com" date="1522238400">- move Changelog back to runtime package as it might not
  be only developer documentation</changelog>
</package>
<package pkgid="d459d36374adc19294d12e19fbe6731971b0b0267ba4e81353ac0ca96a32e022" name="libefa1" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="a7c6e7d77c97f18174a7d9fbcd0e029ef9a03fcd2aaf9b64eeb8e5aa9b666004" name="libefivar1" arch="x86_64">
  <version epoch="0" ver="37" rel="6.12.1"/>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="glin@suse.com" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="glin@suse.com" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="glin@suse.com" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="glin@suse.com" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
  <changelog author="glin@suse.com" date="1623844800">- Add efivar-bsc1187386-fix-emmc-parsing.patch to fix the eMMC
  sysfs parsing (bsc#1187386)</changelog>
</package>
<package pkgid="10f312260f737f3a3adfcf31edaa74c170fec730a25fd4f532f30ec0122bb9fe" name="libelf1" arch="x86_64">
  <version epoch="0" ver="0.168" rel="4.5.3"/>
  <changelog author="bwiedemann@suse.com" date="1490961600">- make tests pass when user does not want debuginfo (boo#1031556)</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Add missing ldconfig calls for libasm1</changelog>
  <changelog author="mliska@suse.cz" date="1493121600">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
  fix .gnu.attributes checking on ppc64{,le}.</changelog>
  <changelog author="mliska@suse.cz" date="1493294400">- Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
  unconditionally in the spec file. As we can't support binary diff,
  a newly added test-case is removed from the patch.</changelog>
  <changelog author="jengelh@inai.de" date="1495972800">- Update Git-Clone URL</changelog>
  <changelog author="schwab@linux-m68k.org" date="1497787200">- ppc-machine-flags.patch: support EM_PPC machine flags
- disable-tests-with-ptrace.patch: disable more tests</changelog>
  <changelog author="jengelh@inai.de" date="1501588800">- Update package descriptions.
- Rename libebl1 to libebl-plugins as these are not linked,
  but dlopened using their unversioned libebl_$ARCH.so name.
- Have libelf1 require libebl-plugins (libebl.a, which does the
  dlopen call, is staticly built into libelf1). This is necessary
  for pahole to display its results. [boo#1049871]</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Restore obsolete on libebl.</changelog>
  <changelog author="jmoreira@suse.com" date="1537876800">- CVE-2017-7613: elfutils: denial of service (memory consumption)
  via a crafted ELF file (bnc#1033090)
  Add patch:
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
- CVE-2017-7612: elfutils: denial of service (heap-based buffer
  over-read and application crash) via a crafted ELF file
  (bnc#1033089)
  Add patch: elfutils-dont-trust-sh_entsize.patch</changelog>
  <changelog author="jmoreira@suse.com" date="1558526400">- CVE-2018-16402: libelf: denial of service/double free on an
  attempt to decompress the same section twice (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2018-18521: arlib: Divide-by-zero vulnerabilities in the
  function arlib_add_symbols() used by eu-ranlib (bnc#1112723)
  Add patch:
  arlib-check-that-sh_entsize-isnt-zero.patch
- CVE-2017-7611: elfutils: DoS (heap-based buffer over-read and
  application crash) via a crafted ELF file (bnc#1033088)
  Add patch:
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
- CVE-2017-7610: elflint: heap-based buffer overflow in check_group
  (bnc#1033087)
  Add patch:
  elflint-dont-check-section-group-without-flags-word.patch
- CVE-2018-16403: heap buffer overflow in readelf (bnc#1107067)
  Add patch:
  libdw-check-end-of-attributes-list-consistently.patch
- CVE-2018-16062: heap-buffer-overflow in
  /elfutils/libdw/dwarf_getaranges.c:156 (bnc#1106390)
  Add patch:
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
- CVE-2018-18310: Invalid Address Read problem in
  dwfl_segment_report_module.c (bnc#1111973)
  Add patch:
  libdwfl-sanity-check-partial-core-file-data-reads.patch
- CVE-2019-7150: dwfl_segment_report_module doesn't check whether
  the dyn data read from core file is truncated (bnc#1123685)
  Add patch:
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
- CVE-2019-7665: NT_PLATFORM core file note should be a zero
  terminated string (CVE is a bit misleading, as this is not a bug
  in libelf as described) (bnc#1125007)
  Add patch:
  libebl-check-NT_PLATFORM-core-notes.patch
- CVE-2017-7609: memory allocation failure in __libelf_decompress
  (bnc#1033086)
  Add patch:
  libelf-check-compression-before-allocate-output-buffer.patch
- CVE-2018-16402: Double-free crash in nm and readelf (bnc#1107066)
  Add patch:
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
- CVE-2017-7607: heap-based buffer overflow in handle_gnu_hashi
  (readelf.c) (bnc#1033084)
  Add patch:
  readelf-fix-off-by-one-sanity-check.patch
- CVE-2018-18520: eu-size: Bad handling of ar files inside are
  files (bnc#1112726)
  Add patch:
  size-handle-recursive-elf-ar-files.patch
- CVE-2017-7608: heap-based buffer overflow in
  ebl_object_note_type_name (eblobjnotetypename.c) (bnc#1033085)
  Add patch:
  use-the-empty-string-for-note-names-with-zero-size.patch</changelog>
</package>
<package pkgid="e2aabc41cc59cba63e17d1a773059bac5426041aa102e311512d7d045a251b59" name="libepoxy0" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="2.25"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1393416000">- Init libepoxy package</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1400328000">- Update to 1.2
  * This is a bugfix and feature release. On the feature side of
  things, it brings in an updated registry with support for
  GLES 3.1 and EGL 1.5, along with miscellaneous other extensions,
  and many more aliases for GLES functions. On the bugfix side,
  it should be much more portable to non-Mesa drivers (nvidia binary
  in particular) and systems with mixed Mesa and non-Mesa drivers,
  and actually install the wgl headers in the windows build.
- Explicitly BuildRequire pkgconfig(x11), and don't count other
  packages drag it in
- Drop git_fixes.patch, merged upstream</changelog>
  <changelog author="sndirsch@suse.com" date="1423742400">- u_sort-the-providers-by-their-enum-not-by-their-functi.patch
  * sort the providers by their enum not by their function name;
    patch by coolo (bnc#917533)</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Add baselibs.conf in order to build 32bit packages.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1437393600">- Update to 1.3.1
  * brown-paper-bag fix to unexport another private symbol that we'd
    leaked, noticed when I went diffing the exported symbols between
    v1.2 and v1.3 for the debian build.
- Changes since 1.3.0:
  * MSVC 2013 support.
  * OSX drops GLX support.
  * Updates to the registry
  * Fixes for a nonconformant GL implementation
  * Library size reductions
  * Reproducible builds
- Drop u_sort-the-providers-by-their-enum-not-by-their-functi.patch,
  merged upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1488628800">- Update to version 1.4.1:
  * Find the appropriate version of the Python interpreter when
    building.
  * Ensure that the dispatch generation script works with Python
    2.x and 3.x.
  * Ensure that Epoxy builds correctly under Windows.
  * Fix location of the m4 macros in the autotools build.
- Changes from version 1.4.0:
  * Epoxy can now build with MSVC versions prior to 2013; we still
    recommend using a recent, C99-compatible compiler, like MSVC
    2015.
  * When used under X11, Epoxy now attempts to handle the cases
    where the GLX extension is not built or not available.
  * GLX can now be enabled and disabled at configuration time; this
    allows building Epoxy with GLX on macOS, and allows building
    Epoxy without GLX on embedded platforms.
  * Epoxy now exposes API that lets dependent projects safely check
    if platform API like GLX and EGL is available at run time.
  * EGL support has been improved on Windows, and made more
    resilient on other platforms.
  * Epoxy supports building with the Meson build system, which has
    Ninja, Visual Studio, and XCode backends.
  * Epoxy can generate its API reference using Doxygen (currently
    only available on Meson builds).
  * The GL registry has been updated with the latest version of the
    API references provided by Khronos; Epoxy now supports the API
    introduced by OpenGL 4.5.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496577600">- Update to version 1.4.2:
  * Add C++ guards around generated headers.
  * Add z,relro and z,now to the GCC linker flags.
  * Add explicit version flags for macOS builds.
  * Add missing visibility compiler flags.
  * Prefer using pkg-config files to find GLES.
  * Fix build on MSVC 2013 when using the inline keyword.
  * Fix dlwrap on aarch64.
  * Require Meson ? 0.38.1.
  * Allow building Epoxy as a Meson sub-project.
  * Avoid crashes when running Epoxy on X servers without GLX.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496750400">- Update to version 1.4.3:
  + Require Meson 0.39.1; the previous release already had an
    implicit requirement on this version.
  + Allow disabling EGL support when building Epoxy.
  + Add support for building on Haiku.
  + Update EGL registry from Khronos.
- Switch to meson build:
  + Drop autoconf, automake and libtool BuildRequires, and drop
    conditional autogen.sh call.
  + Add meson BuildRequires and add meson macros, drop autotools
    macros.
- Correct docs installed.
- Use "Full and pretty" source name.
- Run spec-cleaner.
- Add pkgconfig(glesv1_cm) and pkgconfig(glesv2) BuildRequires:
  Build the optional gles v1 and v2 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1515585600">- -devel package requires pkgconfig(x11), pkgconfig(egl)
  but those deps are not generated automatically.</changelog>
</package>
<package pkgid="9a2911886ed5c0fe59e631ccf26ed30c2cbab366e3b700a1b32c09249a7e6c29" name="libesmtp" arch="x86_64">
  <version epoch="0" ver="1.0.6" rel="150.4.1"/>
  <changelog author="lmichnovic@suse.cz" date="1137499200">- Updated to version 1.0.4
- enabled support for lwres: lwres_includedir.patch; bind-devel added into NFB
- enabled support for ntlm, etrn</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="crrodriguez@suse.de" date="1188907200">- fix #307257 missing requires of the libesmtp-devel package</changelog>
  <changelog author="mrueckert@suse.de" date="1188907201">- remove postfix from the buildrequires
- do not package generic INSTALL file</changelog>
  <changelog author="bwalle@suse.de" date="1218024000">- allow multiple calls of smtp_set_header() for Cc and Bcc headers
- disable lwres because we don't want to have a daemon (the lwresd)
  running just for address resolution</changelog>
  <changelog author="freitag@novell.com" date="1272456000">- Add libestmp-commonname.diff to do stricter check on commonName
  bnc#585393.</changelog>
  <changelog author="dimstar@opensuse.org" date="1281441600">- Update to version 1.0.6:
  + Each component matched by match-domain() is either a single
    '*' which matches anything or a case-insensitive comparison
    with a string of alphanumeric characters or a '-'.
- Changes from version 1.0.5:
  + The Gmail server reports enhanced status codes but then fails
    to provide them in some cases. The parser is now tolerant of
    this but warns the application using a new event flag
    SMTP_EV_SYNTAXWARNING that it is progressing despite the syntax
    error.
  + Fixed bug where To, Cc, Bcc etc. accepted only single values
    instead of a list.
  + Fix reversed comparison on the return value of gettimeofday().
- Drop upstream fixed patches libesmtp-1.0.4-multiple-cc.patch and
  libestmp-commonname.diff.
- Cleaned spec file using spec-cleaner.</changelog>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1475236800">- Add libesmtp-tlsv12.patch: All TLS clients must support and use
  the highest TLS version available if possible not only TLS 1.0.
  Patch sent to upstream long time ago, no response. website
  has also vanished from the internet (bsc#1005909).
- Pass --disable-isoc to configure, pick the compiler's default C
  standard mode (currently gnu11).</changelog>
  <changelog author="yfjiang@suse.com" date="1628251200">- Add libesmtp-fix-cve-2019-19977.patch: Fix stack-based buffer
  over-read in ntlm/ntlmstruct.c (bsc#1160462 bsc#1189097).</changelog>
</package>
<package pkgid="8619b29ef4c31647da70d761624947da2389857beb1fd0eae64adb56025537b3" name="libevent-2_1-8" arch="x86_64">
  <version epoch="0" ver="2.1.8" rel="2.23"/>
  <changelog author="ddiss@suse.com" date="1413892800">- Update to 2.1.4 alpha
  * Added event_base_get_num_events()
  * New event_base_active_by_fd API
  * Add event_base_active_by_signal by analogy
  * Add access to max event count stats
  * Implemented EV_CLOSED event for epoll backend
    (EPOLLRDHUP).
  * Add evutil_secure_rng_set_urandom_device_file
  * Add function to fetch underlying ratelimit cfg
  * Pass and return const for bufferevent_get_token_bucket_cfg
  * Add watermark introspection
  * Add an option to trigger bufferevent I/O callbacks
  * Add an option to trigger bufferevent event callbacks
  * Add evhttp_connection_get_server()
  * add a http default content type option
  * http: implement new evhttp_connection_get_addr() api.
  * Add a variant of evhttp_send_reply_chunk() with a callback on
    evhttp_write_buffer()
  * Allow registering callback for parsing HTTP headers
  * Provide on request complete callback facility
  * evhttp_request_set_on_complete_cb to be more specific about what
    the function actually does and usage
  * bug fix for issues #293 evdns_base_load_hosts doesn't remove
    outdated addresses
  * Don't segfault on no found event backend.
  * Change the BSD license from 4 to 3-clause.
  * Minimum required python version is 2.4.
  * Added EVENT__ENABLE_GCC_WARNINGS, turns all warnings into
    errors.
  * Some work on making it possible to simply do add_subdirectory() on
    the project.
  * Rename event_extras to event_extra
  * If evsel-&gt;del() fails, don't leave the evmap in an inconsistent
    state
  * Move event_debug_note_teardown_ before mm_free.
  * Check CLOCK_MONOTONIC_* at runtime if needed.
  * Fix reinit of fds with EV_WRITE but not EV_READ.
  * Tweaked callbacks to prevent race condition
    (https://github.com/libevent/libevent/issues/104)
  * Move assert(ev) to before we use ev in EV_CLOSURE_EVENT_FINALIZE
    case
  * Fix a double close() bug in evhttp when the underlying bufferevent uses
    BEV_OPT_CLOSE_ON_FREE.
  * Avoid racy bufferevent activation
  * When we seed from /proc/sys/kernel/random/uuid, count it as success
  * Avoid other RNG initialization FS reads when urandom file is
    specified
  * Really remove RNG seeds from the stack
  * Initialize async bufferevent timeout CBs unconditionally
  * Checking request nameserver for NULL, before using it.
  * Fix SEGFAULT after evdns_base_resume if no nameservers
    installed.
  * Actually use the log facility for reporting evdns problems.
  * Fix SEGFAULT after evdns_base_resume if no nameservers
    installed.
  * fix for ServFail from RIPE Atlas release
  * Missed lock acquire/release in event_base_cancel_single_callback_()
  * Fix locking in bufferevent_get_options_().
  * Avoid leaking segment mappings when offset is not a page multiple
  * Add tests for evdns_base_resume().
  * Avoid redundant syscall to make a nonblocking socket nonblocking
  * Avoid redundant syscall if making a socket cloexec twice
  * Avoid redundant invocations of init_extension_functions for IOCP
  * le-proxy: Fail more gracefully if opening listener fails
  * http-server: drop uri_root from base_url in http-server.
  * https-client: POST supported, args supported
  * https-client: Set hostname for SNI extension
- Update to 2.1.3 alpha
  * Implement event_finalize() and related functions to avoid certain
    deadlocks
  * Use finalization feature so bufferevents can avoid deadlocks
  * Always run pending finalizers when event_base_free() is called
  * Remove bufferevent_del_generic_timeout_cbs as now unused
  * More documentation for finalization feature
  * Make the event_finalize* functions return an error code
  * Mark the finalize stuff as experiemental in case it needs to
    change
  * evdns: New flag to make evdns not prevent the event loop from
    exiting
  * Make event_remove_timer behave correctly with persistent timers
  * Unit test for event_remove_timer with EV_PERSIST.
  * Double-check next timeout when adding events
  * event_base_update_cache_time should be a no-op if the loop isn't
    running
  * Avoid leaking fds on evconnlistener with no callback set
  * Avoid double-close on getsockname error in evutil_ersatz_socketpair
  * Fix a locking error in bufferevent_socket_get_dns_error.
  * Fix a mistake in evbuffer_remove() arguments in example http server code
  * When EWOULDBLOCK is not EAGAIN, treat it as equivalent to it
  * Fix ipv6 support for http. When URL contain domain, not IP
    address.
  * uri decode: fix for warning "use of uninitialised value"
  * uri decode: changed the test for the existence of the next character
  * Add new error_cb for actual reporting of HTTP request errors.
  * Add test for EVREQ_HTTP_REQUEST_CANCEL into http_cancel_test()
  * Drop extra header http_struct.h from regress_http.c
  * https-client was putting newlines at 256-byte boundaries
  * better handling of OpenSSL errors
  * use Debian's default root certificate location
  * use iSECPartners code to validate hostname in certificate
  * pull in wildcard matching code from cURL
- Update to 2.1.2 alpha
  * Replace pipe-based notification with EVFILT_USER where possible.
  * Make th_base_lock nonrecursive.
  * New event_get_priority() function to return an event's priority
  * Add a bufferevent_get_priority() function
  * Add an event_base_loopcontinue() to tell Libevent to rescan for more
    events right away
  * Add a new callback to get called on evbuffer_file_segment free
  * Expose event_base_foreach_event() as a public API.
  * Add an event_remove_timer() to remove timer on an event without
    deleting it
  * Make bufferevent_set_timeouts(bev, NULL, NULL) have plausible
    semantics
  * Rename event_enable_lock_debuging() to ..._debugging(). (The old name
    should still work.)
  * Add missing implementation for event_enable_debug_logging
  * Do not track use_monotonic field when is no monotonic clock
  * EVENT_BASE_FLAG_PRECISE_TIMER indicates we want fine timer precision
  * On Linux, use CLOCK_MONOTONIC_COARSE by default
  * Refactor monotonic timer handling into a new type and set of
    functions; add a gettimeofday-based ratcheting implementation
  * Add EVENT_PRECISE_TIMER environment var for selecting precise-but-slow
    timer
  * Avoid giving a spurious warning when timerfd support is unavailable
  * Free dangling event_once objects on event_base_free()
  * Avoid (unlikely) overflow in bench_httpclient.c
  * Change evutil_weakrand_() to avoid platform random()
  * Refactor the callback part of an event into its own event_callback
    type
  * Add "active later" event_callbacks to supersede deferred
  * event_base_assert_ok: check value of event_active_count for
    correctness
  * Replace deferred_cbs with event_callback-based implementation.
  * Restore our priority-inversion-prevention code with deferreds
  * Refactor event_persist_closure: raise and extract some common logic
  * Remove the unused bits from EVLIST_ALL
  * ignore LWS after field-content in headers
  * Remove trailing tabs in HTTP headers as well.
  * Remove internal ws from multiline http headers correctly
  * add evhttp_request_get_response_code_line
  * Use EVUTIL_SOCKET_ERROR() wrapper to save/restore errno in
    evhttp_connection_fail_
  * preserve errno in evhttp_connection_fail_ for inspection by the
    callback
  * Correctly handle running on a system where accept4 doesn't work.
  * Avoid double-free on error in evbuffer_add_file.
  * Fix another possible uninitialized read in dns regression tests.
  * Prevent reference leak of bufferevent if getaddrinfo fails.
  * Make event_base_getnpriorities work with old "implicit base" code
  * Fix event_dlist definition when sys/queue not included
- Update to 2.1.1 alpha
  * Replace several TAILQ users with LIST. LIST can be a little faster than
    TAILQ for cases where we don't need queue-like behavior.
  * Disabled code to optimize the case where we reinsert an existing
    timeout
  * Remove a needless base-notify when rescheduling the first timeout
  * Save a needless comparison when removing/adjusting timeouts
  * Possible optimization: split event_queue_insert/remove into
    separate functions.
  * Make event_count maintenance branchless at the expense of an
    extra shift.
  * Optimization in event_process_active(): ignore maxcb &amp; endtime
    for highest priority events.
  * Bypass event_add when using event_base_once() for a 0-sec timeout
  * Remove the eventqueue list and the ev_next pointers.
  * Roughly 20% speed increase when line-draining a buffer using
    EVBUFFER_EOL_CRLF
  * Infrastructure for using faster/fewer syscalls when creating
    sockets
  * Minimize syscalls during socket creation in listener.c
  * Use a wrapper function to create the notification
    pipe/socketpair/eventfd
  * Use pipes for telling signals to main thread when possible
  * Save syscalls when constructing listener sockets for evhttp
  * Save some syscalls when creating evdns sockets
  * Save some syscalls when constructing a socket for a bufferevent
  * Prefer epoll_create1 on Linux where available
  * Use current event set rather than current pending change when
    deciding whether to no-op a del
  * evport: use evmap_io to track fdinfo status. Should save time and
    RAM.
  * evport: Remove a linear search over recent events when
    reactivating them
  * evport: Use portev_user to remember fdinfo struct
  * evport: don't scan more events in ed_pending than needed
  * evport: Remove artificial low limit on max events per getn call
  * Reenable main/many_events_slow_add for evport in 2.1
  * Add event_enable_debug_logging() to control use of debug logs
  * Add event_config function to limit time/callbacks between calls
    to dispatch
  * New EVLOOP_NO_EXIT_ON_EMPTY option to keep looping even when no
    events are pending
  * Add event_base_get_npriorities() function.
  * Make evbase_priority_init() and evbase_get_npriorities()
    threadsafe
  * New event_base_update_cache_time() to set cached_tv to current
    time
  * Add event_self_cbarg() to be used in conjunction with
    event_new().
  * Add a new libevent_global_shutdown() to free all globals before
    exiting.
  * Use getifaddrs to detect our interfaces if possible
  * Add event_base_get_running_event() to get the event* whose cb we
    are in
  * Add evbuffer_add_file_segment() so one fd can be used efficiently
    in more than one evbuffer_add_file at a time
  * Allow evbuffer_ptr_set to yield a point just after the end of the
    buffer.
  * Allow evbuffer_ptr to point to position 0 in an empty evbuffer
  * Set the special "not found" evbuffer_ptr consistently.
  * support adding buffers to other buffers non-destructively
  * prevent nested multicast references, reworked locking
  * New EVBUFFER_EOL_NUL to read NUL-terminated strings from an
    evbuffer
  * Make evbuffer_file_segment_types adaptable
  * Added evbuffer_add_iovec and unit tests.
  * Add evbuffer_copyout_from to copy data from the middle of a
    buffer
  * Allow users to set allow_dirty_shutdown
  * Add a bufferevent_getcb() to find a bufferevent's current
    callbacks
  * bufferevent: Add functions to set/get max_single_read/write
    values.
  * bev_ssl: Be more specific in event callbacks. evhttp in particular gets
    confused without at least one of BEV_EVENT_{READING|WRITING}.
  * Support TCP_DEFER_ACCEPT sockopts for listeners
  * Allow evconnlistener to be created in disabled state.
  * The LEV_OPT_CLOSE_ON_EXEC flag now applies to accepted listener
    sockets too
  * Add evhttp callback for bufferevent creation; this lets evhttp
    support SSL.
  * evhttp: Add evhttp_foreach_bound_socket.
  * Provide the autoconf m4 macros for the new OpenSSL via pkg-config
    stuff.
  * Move libevent 1.x headers to include/, to put all public headers in
    a new place.
  * Add a magic number to debug_locks to better catch lock-coding
    errors.
  * munge the debug_lock signature before freeing it: it might help us
    catch use-after-free
  * Tweaks to return types with end-of-buf ptrs
  * New evhttp function to adjust initial retry timeout
  * event_rpcgen.py now prints status information to stdout and errors to
    stderr.
  * Restore fast-path event_reinit() for slower backends
  * Check changelist as part of checking representational integrity
  * Convert event-config.h macros to avoid reserved identifiers
  * Convert include-guard macro convention to avoid reserved identifiers
  * Make event_rpcgen.py output conform to identifier conventions
  * Apply the naming convention to our EVUTIL_IS* functions
  * Do not use system EAI/AI values if we are not using the system
    getaddrinfo.</changelog>
  <changelog author="ddiss@suse.com" date="1413892801">- Fix build on non-SUSE rpm based platforms.</changelog>
  <changelog author="ddiss@suse.com" date="1420804800">- Update to 2.1.5 beta
  * Avoid integer overflow bugs in evbuffer_add() and related
    functions.  See CVE-2014-6272 advisory for more information.
  * Provide support for SO_REUSEPORT through LEV_OPT_REUSABLE_PORT
  * Fix use-after-free error in EV_CLOSURE_EVENT callback
  * Fix race caused by event_active
  * Fix evbuffer_peek() with len==-1 and start_at non-NULL.
  * Consistently check for failure from evbuffer_pullup()
  * Fix evbuffer_peek() with len==-1 and start_at non-NULL.
  * be async: avoid double close()
  * Avoid double free for filterevents that use BEV_OPT_CLOSE_ON_FREE
  * fix bufferevent setwatermark suspend_read
  * bufferevent_openssl: reset fd_is_set when setfd with -1 is called
  * Add evhttp_connection_set_family() to set addrinfo-&gt;family for
    DNS requests
  * Implement interface that provides the ability to have an outbound
    evhttp_connection free itself once all requests have completed
  * Implement new/free for struct evutil_monotonic_timer and export
    monotonic time functions
  * Fix a crash in evdns related to shutting down evdns
  * evdns: avoid read-after-free in evdns_request_timeout_callback()
  * Correctly handle allocation failures in evdns_getaddrinfo
  * evdns: fix EVDNS_BASE_DISABLE_WHEN_INACTIVE in case
    retransmit/retry
  * evdns: add retry/reissue tests for
    EVDNS_BASE_DISABLE_WHEN_INACTIVE
  * evdns: fail ns after we are failing/retrasmitting request
  * http: reset connection before installing retry timer (fix http
    retries handling)
  * regress_dns: fix leaks in getaddrinfo_async{,_cancel_stress}
    tests
  * use correct tt macro for pointer compare
  * regress_buffer: fix 'memcmp' compare size
  * Use a more precise calculation for max in time-ratelim.c
  * Make a buffer larger in the tests to avoid a scary
    evbuffer_copyout_from()
  * Make http-server.c output into good html5
  * Use FindClose for handle from FindFirstFile in http-server.c
  * https-client: add -retries argument, for connection retries
  * Fix mixed declarations and code (forbidden by ISO C90)
  * tree.h: drop duplicated content of tree.h
  * evdns: disable probing with EVDNS_BASE_DISABLE_WHEN_INACTIVE
  * Change return type of evutil_load_windows_system_library_ to
    HMODULE</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1424606400">- update to 2.0.22:
  * Avoid integer overflow bugs in evbuffer_add() and related
    functions. See CVE-2014-6272 advisory for more information
  * fix #73 and fix http_connection_fail_test to catch it
  * Avoid racy bufferevent activation
  * Fix compilation with WIN32_HAVE_CONDITION_VARIABLES enabled
  * Fix missing AC_PROG_SED on older Autoconfs
  * Backport libevent to vanilla Autoconf 2.59 (as used in RHEL5)
  * Use AC_CONFIG_HEADERS in place of AM_CONFIG_HEADERS for
    autmake 1.13 compat
  * Rename configure.in to configure.ac to appease newer autoconfs
  * Avoid using top_srcdir in TESTS: new automakes do not like this
  * Use windows vsnprintf fixup logic on all windows environments
  * Fix a compiler warning when checking for arc4random_buf linker
    breakage
  * Fix another arc4random_buf-related warning
  * Add -Qunused-arguments for clang on macos
  * Avoid leaking fds on evconnlistener with no callback set
  * Avoid double-close on getsockname error in
    evutil_ersatz_socketpair
  * Fix a locking error in bufferevent_socket_get_dns_error
  * libevent/win32_dealloc() : fix sizeof(pointer) vs
    sizeof(*pointer)
  * bufferevent_pair: don't call downcast(NULL)
  * Consistently check for failure from evbuffer_pullup()
  * Fix race caused by event_active
  * Avoid redundant invocations of init_extension_functions for
    IOCP
  * Typo fixes from Linus Nordberg
  * Add a few files created by "make verify" to .gitignore
  * regress_buffer: fix 'memcmp' compare size
  * Fix bufferevent setwatermark suspend_read
  * Fix evbuffer_peek() with len==-1 and start_at non-NULL
  * Checking request nameserver for NULL, before using it
  * Fix SEGFAULT after evdns_base_resume if no nameservers
    installed
  * Fix a crash in evdns related to shutting down evdns
  * Check does arch have the epoll_create and __NR_epoll_wait
    syscalls
  * Avoid other RNG initialization FS reads when urandom file is
    specified
  * When we seed from /proc/sys/kernel/random/uuid, count it as
    success
  * Document that arc4random is not a great cryptographic PRNG
  * Add evutil_secure_rng_set_urandom_device_file
  * Really remove RNG seeds from the stack
  * Fix a mistake in evbuffer_remove() arguments in example http
    server code
  * Fix a typo in a comment in buffer.h
  * Clarify event_base_loop exit conditions
  * Use FindClose for handle from FindFirstFile in http-server.c
  * Fix a typo in a doxygen comment
- update source URL</changelog>
  <changelog author="mpluskal@suse.com" date="1426334400">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests that do not require network connection</changelog>
  <changelog author="ddiss@suse.com" date="1467806400">- Fix pkg-config/pkgconfig BuildRequires for Fedora.</changelog>
  <changelog author="ddiss@suse.com" date="1480075200">- Update to 2.1.7 rc
  * Fix cmake -DEVENT__COVERAGE=ON
  * use ev_uint16_t instead of unsigned short for port
  * poll: Prevent libevent from spinning if POLLNVAL occurs
  * Make it build using OpenSSL 1.1.0
  * Don't call BIO_number_{read|written} on NULL BIOs.
  * Switch from a 512 to 2048-bit RSA key.
  * Ignore temporary configure files</changelog>
  <changelog author="ddiss@suse.com" date="1487592000">- Update to 2.1.8 stable
  * Fix _FILE_OFFSET_BITS redefinition
  * evutil_time: include &lt;unistd.h&gt; when there is only sleep()/usleep()
  * test/dns: run async resolving after sync one (to avoid timeouts)
  * test/http: turn off some tests that based on backlog filling
  * Fix incorrect MIME type
- Add libevent-2.1.8-stable.tar.gz.asc tarball GPG signature
  * Replace keyring with Azat Khuzhin's public key</changelog>
  <changelog author="dimstar@opensuse.org" date="1506945600">- Add baselibs.conf: build libevent-2_1-8-32bit (needed by
  libqt5-qtwebengine).</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Trim description of secondary packages and SRPM.
  Rectify RPM group.</changelog>
</package>
<package pkgid="8d86f1cb58d23719b33c860d43e548c93f9d293aa3e5e0f56179443d2715d041" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="3.19.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1509019200">- Version update to 2.2.4 Sat August 19 2017
  * Bug fixes:
    [#115]  Fix copying of partial characters for UTF-8 input
  * Other changes:
    [#109]  Fix "make check" for non-x86 architectures that default
    to unsigned type char (-128..127 rather than 0..255)
    [#109]  coverage.sh: Cover -funsigned-char
    Autotools: Introduce --without-xmlwf argument
    [#65]  Autotools: Replace handwritten Makefile with GNU Automake
    [#43]  CMake: Auto-detect high quality entropy extractors, add new
    option USE_libbsd=ON to use arc4random_buf of libbsd
    [#74]  CMake: Add -fno-strict-aliasing only where supported
    [#114]  CMake: Always honor manually set BUILD_* options
    [#114]  CMake: Compile man page if docbook2x-man is available, only
    [#117]  Include file tests/xmltest.log.expected in source tarball
    (required for "make run-xmltest")
    [#111]  Fix some typos in documentation
    Version info bumped from 7:5:6 to 7:6:6
- Release 2.2.3 Wed August 2 2017
  * Bug fixes:
    [#85]  Fix a dangling pointer issue related to realloc
  * Other changes:
    [#91]  Linux: Allow getrandom to fail if nonblocking pool has not
    yet been initialized and read /dev/urandom then, instead.
    This is in line with what recent Python does.
    [#86]  Check that a UTF-16 encoding in an XML declaration has the
    right endianness
  [#4] #5 #7  Recover correctly when some reallocations fail
    Repair "./configure &amp;&amp; make" for systems without any
    provider of high quality entropy
    and try reading /dev/urandom on those
    Ensure that user-defined character encodings have converter
    functions when they are needed
    Fix mis-leading description of argument -c in xmlwf.1
    Rely on macro HAVE_ARC4RANDOM_BUF (rather than __CloudABI__)
    for CloudABI
    [#100]  Fix use of SIPHASH_MAIN in siphash.h
    [#23]  Test suite: Fix memory leaks
    Version info bumped from 7:4:6 to 7:5:6
- Release 2.2.2 Wed July 12 2017
  * Security fixes:
    [#43]  Protect against compilation without any source of high
    quality entropy enabled, e.g. with CMake build system;
  * [MOX-006] Fix non-NULL parser parameter validation in XML_Parse;
    resulted in NULL dereference, previously;
  * Bug fixes:
    [#69]  Fix improper use of unsigned long long integer literals
  * Other changes:
    [#73]  Start requiring a C99 compiler
    [#49]  Fix "==" Bashism in configure script
    [#58]  Address compile warnings
    [#68]  Fix "./buildconf.sh &amp;&amp; ./configure" for some versions
    of Dash for /bin/sh
    [#72]  CMake: Ease use of Expat in context of a parent project
    with multiple CMakeLists.txt files
    [#72]  CMake: Resolve mistaken executable permissions
    [#76]  Address compile warning with -DNDEBUG (not recommended!)
    [#77]  Address compile warning about macro redefinition
  * Added patch expat-docbook.patch to compile the man pages with
  docbook-to-man
  * Cleaned spec file with spec-cleaner</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- Version update to 2.2.5 Tue October 31 2017
  * Bug fixes:
  - If the parser runs out of memory, make sure its internal
    state reflects the memory it actually has, not the memory
    it wanted to have.
  - The default handler wasn't being called when it should for
    a SYSTEM or PUBLIC doctype if an entity declaration handler
    was registered.
  - Fix a case of mistakenly reported parsing success where
    XML_StopParser was called from an element handler
  - Function XML_ErrorString was returning NULL rather than
    a message for code XML_ERROR_INVALID_ARGUMENT
    introduced with release 2.2.1
  * Other changes:
  - Add argument -N adding notation declarations
  - various compiler-specific fixes
  - Improve docbook2x-man detection
- drop expat-docbook.patch
  * fixed in 0f5186c7b8e503c669e332d944712de010b265f3
- switch to github for release tarballs and website</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Do not generate manpages from docbook
- Temporarily disable profiling due to bug in build system</changelog>
  <changelog author="jengelh@inai.de" date="1510833601">- Expand description of expat-devel.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix (CVE-2018-20843, bsc#1139937)
  * Large number of colons in input makes parser consume high
    amount of resources
  * Added expat-CVE-2018-20843.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1642420800">- Security fix (CVE-2021-45960, bsc#1194251)
  * A left shift by 29 (or more) places in the storeAtts function
    in xmlparse.c can lead to realloc misbehavior.
  * Added expat-CVE-2021-45960.patch
- Security fix (CVE-2021-46143, bsc#1194362)
  * Integer overflow exists for m_groupSize in doProlog
  * Added expat-CVE-2021-46143.patch
- Security fix (CVE-2022-22822, bsc#1194474)
  * Integer overflow in addBinding in xmlparse.c
  * Added expat-CVE-2022-22822.patch
- Security fix (CVE-2022-22823, bsc#1194476)
  * Integer overflow in build_model in xmlparse.c
  * Added expat-CVE-2022-22823.patch
- Security fix (CVE-2022-22824, bsc#1194477)
  * Integer overflow in defineAttribute in xmlparse.c
  * Added expat-CVE-2022-22824.patch
- Security fix (CVE-2022-22825, bsc#1194478)
  * Integer overflow in lookup in xmlparse.c
  * Added expat-CVE-2022-22825.patch
- Security fix (CVE-2022-22826, bsc#1194479)
  * Integer overflow in nextScaffoldPart in xmlparse.c
  * Added expat-CVE-2022-22826.patch
- Security fix (CVE-2022-22827, bsc#1194480)
  * Integer overflow in storeAtts in xmlparse.c
  * Added expat-CVE-2022-22827.patch
- Refresh expat-CVE-2018-20843.patch as a p1 patch.
- Use %autosetup macro</changelog>
  <changelog author="david.anes@suse.com" date="1643371200">- Security fix (CVE-2022-23852, bsc#1195054)
  * Expat (aka libexpat) before 2.4.4 has a signed integer overflow
    in XML_GetBuffer, for configurations with a nonzero
    XML_CONTEXT_BYTES
  * Add tests for CVE-2022-23852.
  * Added expat-CVE-2022-23852.patch
- Security fix (CVE-2022-23990, bsc#1195217)
  * Fix unsigned integer overflow in function doProlog triggered
    by large content in element type declarations when there is
    an element declaration handler present (from a prior call to
    XML_SetElementDeclHandler).
  * Add expat-CVE-2022-23990.patch</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
</package>
<package pkgid="e36e2e94eef1e504f7d38f8161a742ba33ba882a6f0391284d5e92dc45d8d25b" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="4.26.1"/>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="jack@suse.cz" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="jack@suse.cz" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="jack@suse.cz" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="jack@suse.cz" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="bb846d5ee5769da9429104a4a059a29d22419d9ff812f79fc48b25620daefc80" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="5b048f6473377192ca2462021b8cb1199e98d686ab672fdc69b3ed6f4ad8cf02" name="libfdt1" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="4.3.1"/>
  <changelog author="jloeser@suse.com" date="1486382400">- version update to 1.4.2
  * including patches up to git commit 3b9c9709
  * Fix NULL pointer use in dtlabel + dtref case
  * fdtdump: check fdt if not in scanning mode
  * Fix memory leak in character literal parsing
  * Don't always generate __symbols__ for plugins
  * Plugin and fixup support
  * fix fdt_stringlist_search()
  * fix fdt_stringlist_count()
  * improve tests
  * minor bugfixes/typos
  * including symbols in version.lds
  * no changelog available
- modified patches:
  * use-tx-as-the-type-specifier-instead-of-zx.patch</changelog>
  <changelog author="jloeser@suse.com" date="1488542400">- version update to 1.4.3
  * Add printf format attributes
  * Correct some broken printf() like format mismatches
  * libfdt: Add fdt_setprop_empty()
  * libfdt: Remove undefined behaviour setting empty properties
  * Print output filename as part of warning messages
  * dtc: Use streq() in preference to strcmp()
  * checks: Add Warning for stricter node name character checking
  * checks: Add Warning for stricter property name character checking
  * dtc: pos parameter to srcpos_string() can't be NULL
  * livetree.c: Fix memory leak</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Update to version 1.4.4:
  * fdtput: Remove star from value_len documentation
  * fdtget: Use @return to document the return value
  * tests: Make realloc_fdt() really allocate *fdt
  * libfdt: overlay: Check the value of the right variable
  * dtc: Simplify asm_emit_string() implementation
  * libfdt: Change names of sparse helper macros
  * Fix assorted sparse warnings
  * Clean up gcc attributes
  * dtc: Don't abuse struct fdt_reserve_entry
- Refresh patches
- Make building more verbose
- Run tests</changelog>
  <changelog author="josef.moellers@suse.com" date="1544702400">- Upgrade to version 1.4.7:
  * checks.c: Overlay fragments are a special case
  * checks.c: added handling of various busses (eg PCI, simple,
    i2c, SPI)
  * checks.c: added some plausibility and syntax checks mainly
    for device proerties.
  * dtc.c: annotate .dts with input source location
  * some code restructuring, cosmetic changes.
  * decumentation cleanup and update
  * some more tests added.</changelog>
  <changelog author="josef.moellers@suse.com" date="1552651200">- Upgrade to version 1.5.0 (bsc#1153301):
  * Added i2c-bus and spi-bus support
  * New "-T" option: "Annotate output .dts with input source file
    and line"
  * Added YAML output format
  * Record source positions
  * Use inttypes.h macros for printing.
  * Fix some minor bugs which may lead to SIGSEGV.
  * Adjusted source URL to working path
  [bug#1128943, use-tx-as-the-type-specifier-instead-of-zx.patch]</changelog>
  <changelog author="afaerber@suse.de" date="1572091200">- Enable YAML output format</changelog>
  <changelog author="dmueller@suse.com" date="1572436800">- update to 1.5.1:
  * Numerous assorted bugfixes
  * Add a new fdt_create_with_flags() function, and a
    FDT_CREATE_FLAG_NO_NAME_DEDUP flag which improves speed at the
    cost of tree size by not deduplicating property names in the
    strings section
  * Run tests against shared library, so it will catch the common
    mistake of not adding new symbols to the versioning script
  * Add a number of missing symbols to versioning script
  * Use Python3 by default for pylibfdt
  * New fdt_append_addrrange() function in libfdt
- remove dtc-license.patch (upstream)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1572436801">- Enable python3 binding in python3-libfdt</changelog>
  <changelog author="dmueller@suse.com" date="1572436802">- switch to building python3 bindings using setuptools to avoid
  patching</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- explicitly pass -pie in CFLAGS, since the build system explicitly passes
  - fPIC, which breaks our gcc-PIE profile. This makes all packaged binaries
  PIE-executables (bsc#1184122).</changelog>
</package>
<package pkgid="63c19dc3d944929031138682490e48712fdb4a74bc069b56e5d6bdda59bb82e4" name="libffi7" arch="x86_64">
  <version epoch="0" ver="3.2.1.git259" rel="10.8"/>
  <changelog author="rguenther@suse.com" date="1486468800">- Package libffi from https://github.com/libffi at 60e4250a77eb3</changelog>
  <changelog author="jengelh@inai.de" date="1486468801">- Provide a _service file (and run it)</changelog>
  <changelog author="rguenther@suse.com" date="1488283200">- Change License to MIT.</changelog>
  <changelog author="dleuenberger@suse.com" date="1489492800">- Add baselibs.conf in order to build libffi7-32bit (boo#1029263).</changelog>
  <changelog author="schwab@suse.de" date="1505736000">- aarch64-struct-by-value.patch: fix passing struct by value on aarch64</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Remove aarch64-struct-by-value.patch, needs to be fixed in python.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1520856000">- libffi-riscv.patch: add support for RISC-V</changelog>
</package>
<package pkgid="4c60af90526308db3563735ab5b7208432ac1f4d4561a59728db540f029a2156" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.30"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO?s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
</package>
<package pkgid="7e0307466257918706853f4e15d7177a9f07c1df468cc2fe3a2816cd2aacac84" name="libfido2-udev" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="1.30"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO?s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
</package>
<package pkgid="b0882362d8ee06df28c65093d5e661194c2825d6efed01059a951892fc532197" name="libfipscheck1" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1390219200">- imported a generic fips helper to verify fips modules, linked
  to openssl.</changelog>
  <changelog author="cfarrell@suse.com" date="1390305600">- license update: BSD-2-Clause
  See LICENSE</changelog>
  <changelog author="meissner@suse.com" date="1401192000">- updated to 1.4.1
  - added manpages
  - fipscheck/fipshmac: Add -s option to specify the hmac suffix
  - fipshmac: Add '-d' option to specify where to put the .hmac files
  - various bugfixes</changelog>
  <changelog author="meissner@suse.com" date="1401710400">- add baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1428926400">- Set RPM groups anew. Drop implicit cleaning parts.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Port to OpenSSL 1.1 (bsc#1042649)
  Adds openssl-1_1-port.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568635200">- Remove #include of unused fips.h to fix build with OpenSSL 1.1.1
  (bsc#1149792)
  * add fipscheck-fips.h_not_needed.patch</changelog>
</package>
<package pkgid="bbbdd4d2bbdfa85a2ad927bbf39dd1d12b87ac277e35876d3fed8b5bd197fb47" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="ea2821dc989fe029a9f69e0da64f43371ebe657429bf44aa47eb92595d96dc02" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="5ce39e151b18b7d6e115ef271dc16165f00e19b47e194520cd496bd8fa3b4ffe" name="libfreetype6" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="4.8.1"/>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="abb44bcc438f43916420b26b6e77d258856f81c710df852f1c4c7eb82579d112" name="libfribidi0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="f7cd423c03be76b3a641aa77fc6c20944ab980120c5fe37e3d9775c9b530e69a" name="libfuse2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.3.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="dmueller@suse.com" date="1371384000">- add aarch64-build-fix.patch</changelog>
  <changelog author="mszeredi@suse.cz" date="1374667200">- Update to version 2.9.3
  - Bug fixes
- Remove fuse-gnu_source.patch (fixed upstream)</changelog>
  <changelog author="bwiedemann@suse.com" date="1418212800">- include commented default fuse.conf (bnc#908292)</changelog>
  <changelog author="mszeredi@suse.cz" date="1432296000">- Update to version 2.9.4
  - fix exec environment for mount and umount (bsc#931452,
    CVE-2015-3202)
  - properly restore the default signal handler
  - fix directory file handle passed to	ioctl() method.
  - fix for uids/gids larger than 2147483647
  - initialize stat buffer passed to -&gt;getattr() and -&gt;fgetattr()</changelog>
  <changelog author="astieger@suse.com" date="1453464000">- fuse 2.9.5:
  * fix warning in mount.c:receive_fd().
  * fix possible memory leak.
  * new upstream project and source URL
  * add new maintainer keyring and verify source signature</changelog>
  <changelog author="fcrozat@suse.com" date="1501502400">- Ensure trusted group is available on Tumbleweed.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1507291200">- fuse 2.9.7
  * Shared-object version has now been bumped correctly.
  * Added SELinux support.
  * Fixed race-condition when session is terminated right after
    starting a FUSE file system.</changelog>
  <changelog author="admorgan@morgancomputers.net" date="1508155200">- Fix download link in fuse.spec</changelog>
  <changelog author="rgoldwyn@suse.com" date="1536667200">- user_allow_other restriction may be bypassed (bsc#1101797, CVE-2018-10906)
  - fusermount-prevent-silent-truncation-of-mount-options.patch
  - fusermount-dont-feed-escaped-commans-into-mount-options.patch
  - fusermount-bail-out-on-transient-config-read-failure.patch
  - fusermount-refuse-unknown-options.patch
  - fusermount-whitelist-known-good-filesystems-for-mountpoints.patch</changelog>
</package>
<package pkgid="e50e18f07080a8e5422912df04f46e62a9527755347348bdc8c602edaa993c93" name="libfuse3-3" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="3.3.8"/>
  <changelog author="idonmez@suse.com" date="1538654400">- Initial release v3.2.6</changelog>
  <changelog author="idonmez@suse.com" date="1543233600">- Update to version 3.3.0
  * The auto_unmount mode now works correctly in combination with
    autofs.
  * The FUSE_CAP_READDIRPLUS_AUTO capability is no longer enabled by
    default unless the file system defines both a readdir() and a
    readdirplus() handler.
  * The description of the FUSE_CAP_READDIRPLUS_AUTO flag has been
    improved.
  * Allow open /dev/fuse file descriptors to be passed via mountpoints
    of the special format /dev/fd/%u. This allows mounting to be
    handled by the parent so the FUSE filesystem process can run
    fully unprivileged.
  * Add a drop_privileges option to mount.fuse3 which causes it to open
    /dev/fuse and mount the file system itself, then run the FUSE file
    filesystem fully unprivileged and unable to re-acquire privilege
    via setuid, fscaps, etc.
  * Documented under which conditions the fuse_lowlevel_notify_*
    functions may block.
  * The chmod, chown, truncate, utimens and getattr handlers of
    the high-level API now all receive an additional struct
    fuse_file_info pointer. There are more API changes, consult
    https://github.com/libfuse/libfuse/releases/tag/fuse-3.3.0
    for details.</changelog>
  <changelog author="jengelh@inai.de" date="1543492800">- Update descriptions.
- Do not make documentation mandatory.</changelog>
  <changelog author="info@paolostivanin.com" date="1552910400">- Update to 3.4.2
  * The examples/passthrough_ll.c example filesystem has been significantly extended.
  * Support for copy_file_range has been added.
  * Build system updates for non-Linux systems.
  * Fixed a memory leak
  * Added OpenAFS and HFS+ to whitelist
  * Docu updates</changelog>
  <changelog author="jengelh@inai.de" date="1552996800">- Amend License: field with BSD2c, from
  https://github.com/libfuse/libfuse/commit/4c699e7debd99b178b9574e7dd20f36937ef296e#diff-3f1e2bdc537057b6ac2f74d095a431b8</changelog>
  <changelog author="info@paolostivanin.com" date="1555502400">- Update to 3.5.0:
  * Changed ioctl commands to "unsigned int" in order to support
    commands which do not fit into a signed int. Commands issued
    by applications are still truncated to 32 bits.
  * Added SMB2 to whitelist (so users can now mount FUSE
    filesystems on mountpoints within SMB 2.0 filesystems).
  * Added a new cache_readdir flag to fuse_file_info to enable
    caching of readdir results. Supported by kernels 4.20 and newer.
  * Add support and documentation for FUSE_CAP_NO_OPENDIR_SUPPORT.</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.6.0
  * Added a new example (passthrough_hp). The functionality is
    similar to passthrough_ll, but the implementation focuses
    on performance and correctness rather than simplicity.
  * Added support for fuse kernel feature max_pages which allows
    to increase the maximum number of pages that can be used per
    request. This feature was introduced in kernel 4.20.
    max_pages is set based on the value in max_write.
    By default max_write will be 1MiB now for kernels that
    support max_pages. If you want smaller buffers or writes
    you have to set max_write manually.</changelog>
  <changelog author="idonmez@suse.com" date="1560427201">- Update to version 3.6.1 (bsc#1137860)
  * Fixed version number (release 3.6.0 was shipped with a declared
    version of 3.0.0).</changelog>
</package>
<package pkgid="78511306c2ea3d8f9c1130481a023bfeb486c25682da2b2fe9fab71c0c3131cb" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="20.2.4" rel="57.13"/>
  <changelog author="sndirsch@suse.com" date="1601380800">- update to 20.2.0
  * includes Intel Rocket Lake Platform Support
    (jsc#SLE/SLE-12880, jsc#SLE/SLE-12882)
- adjusted/refreshed patches:
  * n_add-Mesa-headers-again.patch
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * u_dep_xcb.patch
- docs now available in .rst format (html before)</changelog>
  <changelog author="sndirsch@suse.com" date="1601467200">- U_fix-mpeg1_2-decode-mesa-20.2.patch
  * additional patch currently needed for Mesa 20.2 (boo#1173185)</changelog>
  <changelog author="sndirsch@suse.com" date="1602676800">- update to 20.2.1
  * first bugfix release for the 20.2 branch
- supersedes U_fix-mpeg1_2-decode.patch
- disabled U_fix-mpeg1_2-decode-mesa-20.2.patch; likely no longer
  needed (boo#1173185)</changelog>
  <changelog author="sndirsch@suse.com" date="1602763200">- reenabled U_fix-mpeg1_2-decode-mesa-20.2.patch due to regression
  reported in boo#1173185</changelog>
  <changelog author="sndirsch@suse.com" date="1604750400">- update to 20.2.2
  * second bugfix release for the 20.2 branch</changelog>
  <changelog author="sndirsch@suse.com" date="1606132800">- update to 20.2.3
  * third bugfix release for the 20.2 branch</changelog>
  <changelog author="sndirsch@suse.com" date="1606651200">- enabled build of radeonsi DRI and VDPAU driver on aarch64
  (boo#1179376)</changelog>
  <changelog author="sndirsch@suse.com" date="1606737600">- use llvm11 on factory/TW and sle15-sp3/Leap 15.3</changelog>
  <changelog author="sndirsch@suse.com" date="1606824000">- require llvm-devel *without* any explicit version number for
  factory/TW to imply 'distro default llvm version', which we
  usually bump up when a new stable llvm comes out</changelog>
  <changelog author="sndirsch@suse.com" date="1607342400">- update to 20.2.4
  * fourth (second to last) bugfix release for the 20.2 branch</changelog>
</package>
<package pkgid="2dd7eb6224b050ff5591c90a9c07f302c56fc420eb28243a00dbfeed2289ca50" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="11.2.1+git610" rel="1.3.9"/>
  <changelog author="rguenther@suse.com" date="1623758400">- Change disable_32bit to only disable multilibs for arhcs subject
  to 32bit/64bit handling and make it effective on x86_64.
- Remove the duplicate spec header from cross.spec.in</changelog>
  <changelog author="rguenther@suse.com" date="1623931200">- Update to gcc-11 branch head (79c1185de4a05fdea13b6b0207), git340
  * Fixes ceph build failure.  [gcc#101078]</changelog>
  <changelog author="rguenther@suse.com" date="1624622400">- Update to gcc-11 branch head (62bbb113ae68a7e724255e1714), git400
  * Fixes issue with legacy Fortran code.  [gcc#101123, boo#1187273]</changelog>
  <changelog author="matz@suse.com" date="1625572800">- Provide a libc-bootstrap cross compiler for aarch64 and riscv64
- More preparation for a full glibc cross compiler (not yet active)</changelog>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
</package>
<package pkgid="2ae22f0ac5479d82a8fa63223aa3d98addc51a28bc54c28a4253f4d7db48179e" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
</package>
<package pkgid="369dd633cf0c87eebed80ba5261f3b23a95700015efeab61873649aad940354d" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="8.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1584014400">- Remove check not needed in _gcry_global_constructor [bsc#1164950]
  * Update libgcrypt-Restore-self-tests-from-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224000">- FIPS: Run self-tests from constructor during power-on [bsc#1166748]
  * Set up global_init as the constructor function:
  - libgcrypt-global_init-constructor.patch
  * Relax the entropy requirements on selftest. This is especially
    important for virtual machines to boot properly before the RNG
    is available:
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  * Fix benchmark regression test in FIPS mode:
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585224001">- FIPS: Fix drbg to be threadsafe [bsc#1167674]
  * Detect fork and re-open devices in_gcry_rndlinux_gather_random
  * libgcrypt-check-re-open-dev_random-after-fork.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1585569600">- FIPS: Switch the PCT to use the new signature operation [bsc#1165539]
  * Patches for DSA, RSA and ECDSA test_keys functions:
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-PCT-ECC.patch
- Update patch: libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1586952000">- FIPS: Verify that the generated signature and the original input
  differ in test_keys function for RSA, DSA and ECC: [bsc#1165539]
- Add zero-padding when qx and qy have different lengths when
  assembling the Q point from affine coordinates.
- Refreshed patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="vcizek@suse.com" date="1587038400">- Ship the FIPS checksum file in the shared library package and
  create a separate trigger file for the FIPS selftests (bsc#1169569)
  * add libgcrypt-fips_selftest_trigger_file.patch
  * refresh libgcrypt-global_init-constructor.patch
- Remove libgcrypt-binary_integrity_in_non-FIPS.patch obsoleted
  by libgcrypt-global_init-constructor.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- FIPS: libgcrypt: Double free in test_keys() on failed signature
  verification [bsc#1169944]
  * Use safer gcry_mpi_release() instead of mpi_free()
- Update patches:
  * libgcrypt-PCT-DSA.patch
  * libgcrypt-PCT-RSA.patch
  * libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589889600">- FIPS: RSA/DSA/ECC test_keys() print out debug messages [bsc#1171872]
  * Print the debug messages in test_keys() only in debug mode.
- Update patches: libgcrypt-PCT-RSA.patch libgcrypt-PCT-DSA.patch
  libgcrypt-PCT-ECC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623412800">- Security fix: [bsc#1187212, CVE-2021-33560]
  * Libgcrypt mishandles ElGamal encryption because it lacks exponent
    blinding to address a side-channel attack against mpi_powm
- Add patches:
  * libgcrypt-CVE-2021-33560-ElGamal-exponent-blinding.patch
  * libgcrypt-CVE-2021-33560-fix-ElGamal-enc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
</package>
<package pkgid="3199eef5f3fca1bc68cecf6e58d2e5e3708dd85565912626a122e5ae9a00e1f1" name="libgdbm4" arch="x86_64">
  <version epoch="0" ver="1.12" rel="1.418"/>
  <changelog author="i@marguerite.su" date="1348401600">- update to 1.10
  * fully internationalized. available in Finnish
    ,German, Japanese, Polish and Ukrainian
  * Support for close-on-exec flag in gdbm_open (see GDBM_CLOEXEC in the docs)
  * Improved testgdbm command system
  * Fixed Bug #150, should handle read(2) returning less data
  * Fixed Bug #151, uses uninitialized memory content
  * Fixed handling of NDBM databases in read-only mode
- add zh_CN translation
  * manually add. will submit to upstream.
- drop gdbm-1.8.3.diff (Patch0)
  * seems this one is useless.
- regenerate and change gdbm-1.8.3-no-build-date.patch (Patch4) to
  gdbm-no-build-date.patch
  * its an universal solution no matter the version.
- drop gdbm-protoize_dbm_headers.patch (Patch1)
  * upstream fixed.
- drop gdbm-prototype_static_functions.patch (Patch2)
  * upstream fixed.
- drop gdbm-fix_testprogs.patch (Patch3)
  * upstream code change. now useless.</changelog>
  <changelog author="i@marguerite.su" date="1348488000">- update baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="cfarrell@suse.com" date="1360152000">- license update: GPL-3.0+
  See the COPYING file</changelog>
  <changelog author="pgajdos@suse.com" date="1362398400">- buildrequire makeinfo</changelog>
  <changelog author="jengelh@inai.de" date="1362571200">- Specify exact version requirements for build</changelog>
  <changelog author="pgajdos@suse.com" date="1396267200">- update to 1.11:
  * Improved dump format.
  * New function: gdbm_count.
  * New utilities: gdbm_dump and gdbm_load.
  * gdbmtool</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes to baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1424606400">- Clenup spec file with spec-cleaner
- Update project and download url
- Add gpg signature
- Enable checks</changelog>
  <changelog author="mpluskal@suse.com" date="1463572800">- Update to version 1.12
  * New configuration variable COMPATINCLUDEDIR
- Small spec file cleanups</changelog>
</package>
<package pkgid="1137fc0f33b496bb33b993c1f95d8098ce543d10d529f2b65509768949187f47" name="libgdk_pixbuf-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="3.3.1"/>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="yfjiang@suse.com" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="zcjia@suse.com" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="497aa1428d80246f728dbf7ff93fae20e59f2fc517b7b727a419372ffde90152" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="398097be6a2040a04a58636c348bac0f83a9e5019149c028bb30feeb80aa13b4" name="libgirepository-1_0-1" arch="x86_64">
  <version epoch="0" ver="1.62.0" rel="2.28"/>
  <changelog author="bjorn.lie@gmail.com" date="1550145600">- Update to version 1.59.4:
  + tests: Add functions using flat struct arrays.
  + Clean shebangs out of non-executable scripts and drop exec perm
    from xmlwriter.py.
  + maintransformer: parse deprecation annotations for section
    blocks.
  + repository: g_irepository_get_object_gtype_interfaces.
  + message: handle fatal errors even if warnings are disabled.
  + autotools: Fix build with ``-Wl,--as-needed``.
  + maintransformer: Don't warn on (optional) annotations on
    (inout).
  + girepository: Fix a possible use-after-free if
    g_mapped_file_new() fails and fix possible leak of transitive
    dependency names.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551700800">- Update to version 1.59.5:
  + gir:
  - Include C header in cairo gir file.
  - Skip glib-enumtypes.h for GObject-2.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 1.60.0:
  + gir: Update glib annotations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554811200">- Update to version 1.60.1:
  + Update glib annotations.
  + shlibs: fall back to basename on macOS for relative paths.
  + meson: always pass --quiet to g-ir-scanner.
  + docs: include '--c-include' in g-ir-scanner man page.
  + tests: Fix compatibility with Python 3.5.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560600000">- Update to version 1.60.2:
  + docwriter: Fix Exception message attribute.
  + meson: fix default cairo DLL name on Windows.
  + scanner: Fix error on Windows in case source files are on
    different drives.
  + gi-test: Fix gir file tests with MSVC.
  + MSVC.README.rst: Update VS 2008/x64 build notes.
  + giscanner/scannerlexer.l: Include io.h on Windows.
  + build: Force-include msvc_recommended_pragmas.h on Visual
    Studio.
  + Update glib annotations.</changelog>
  <changelog author="qkzhu@suse.com" date="1565784000">- Update gi-find-deps.sh: upate javascript_requires function to parse
  the new JS import style (bsc#1140614).</changelog>
  <changelog author="mgorse@suse.com" date="1567166400">- Update to version 1.61.2:
  + dumper: Use the distutils linker.
  + structinfo: Fix offset in find_method().
  + tests: Don't include "config.h" in installed files.
  + meson: Make meson.override_find_program working on more complex
    use cases.
- Changes from version 1.61.1:
  + Drop autotools build system.
  + meson: require 0.49.2.
  + Update glib annotations.
  + Add documentation to the RelaxNG schema.
  + Unused variable fixes.
  + cachestore: handle cache getting deleted while loading it.
  + Add Vulkan gir.
  + Make g_irepository_get_object_gtype_interfaces actually work.
  + gimarshallingtests: Add a marshalling test case for GPtrArrays
    and GArrays of structures.
  + scanner: parse and expose function macros.
  + meson: use pkg-config directly for libffi cflags and libs.
  + meson: Fix wrong dependency type check for gio-unix.
  + regress: Add regression test for signal with GError param.
- Add Vulkan to typelib template.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 1.62.0:
  + No changes since 1.61.2.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570881600">- Depend on the specific Python ABI version the module was built with,
  as the _giscanner binary module is ABI dependent. Fixes boo#1153837</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576238400">- Drop python3-Sphix BuildRequires, only used for rebuilding the
  website contents.</changelog>
</package>
<package pkgid="b2e349d42e8202dfb8eeeb379e0b9f6f215b99cbe05bf489ed86bd79ae412067" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="abe7e10a93cb646751c7e49a822c27661125320fde12919f5dc036ede677ae88" name="libglvnd" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.49"/>
  <changelog author="tobias.klausmann@freenet.de" date="1569499200">- Update to version 1.2.0:
  * Changes:
    + Libglvnd now includes and installs the header files for OpenGL, GLES, EGL,
    and GLX.
    + Added pkg-config files for each library.
    + The X11 libraries are now an optional dependency if you're not building
    GLX.
- n_0001-GL-Bump-GL-version-to-9-2.patch
  * with a version of 1.2 the XServer build fails; set the version accordingly to
    allow XServer builds again.
- n_0001-eglplatform-fix-mesa-specific-defines.patch
  * the XServer fails to build; add the mesa specific defines to eglplatform, to
    let it build again.</changelog>
  <changelog author="sndirsch@suse.com" date="1569585600">- let libglvnd-devel provide/obsolete some of previous Mesa devel
  packages:
  * Mesa-libGL-devel
  * Mesa-libEGL-devel
  * Mesa-libGLESv1_CM-devel
  * Mesa-libGLESv2-devel
  * Mesa-KHR-devel
- u_add-gl3ext.h
  * adds missing include/GLES/gl3ext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1570363200">- let libglvnd-devel also provide/obsolete Mesa-libGLESv3-devel</changelog>
  <changelog author="sndirsch@suse.com" date="1570449600">- reverting inclusion of GL, EGL, GLES, GLES2, GLES3 headers;
  no longer let libglvnd-devel package provide and obsolete
  corresponding Mesa gl, egl, gles* devel subpackages; headers
  just aren't compatible; instead require them ...
- supersedes patches:
  * n_0001-eglplatform-fix-mesa-specific-defines.patch
  * u_add-gl3ext.h</changelog>
  <changelog author="sndirsch@suse.com" date="1570449601">- move gl, egl, glesv1_cm and glesv2 pkgconfig files to doc
  directory, so these can be picked up by Mesa build; no longer
  require Mesa devel subpackages ...</changelog>
  <changelog author="sndirsch@suse.com" date="1572004800">- 0001-include-install-GL-headers-when-GL-is-enabled.patch
  * A typo made it depend on EGL instead.
- 0002-Add-a-configure-option-to-disable-glesv1-or-glesv2.patch
  * Because mesa can be built without glesv1 so it breaks
    autodetection. Fixes: https://bugs.archlinux.org/task/64032
    ('mesa-demos doesn't build, unable to find GLES/gl.h')
- 0003-egl-Sync-with-Khronos.patch
  * Reserve enums 0x34A0..0x34AF for ANGLE project. (#93)
    Closes: https://gitlab.freedesktop.org/glvnd/libglvnd/issues/193</changelog>
  <changelog author="sndirsch@suse.com" date="1573128000">- This release is needed for latest Mesa update in order to
  support latest GPUs including Intel (jsc#SLE-7962, jsc#SLE-8024,
  jsc#SLE-8022, jsc#SLE-10182)</changelog>
  <changelog author="sndirsch@suse.com" date="1574596800">- removed n_0001-GL-Bump-GL-version-to-9-2.patch, which is no
  longer needed with xorg-server 1.20.6</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 1.3.2:
  * Update GL/gl.h to match Mesa.
  * GLdispatch: Improve the x86 tsd stubs performance.
  * GLdispatch: Define dynamic dispatch stubs at compile time.
  * GLdispatch: Change entry_generate_default_code to take an index.
  * GLdispatch: Use all 4096 dynamic dispatch stubs.
  * Remove -Werror from default CFLAGS
- run tests
- add disable-glx-tests.patch: disable tests that require X
- remove 0001-include-install-GL-headers-when-GL-is-enabled.patch
  0002-Add-a-configure-option-to-disable-glesv1-or-glesv2.patch
  0003-egl-Sync-with-Khronos.patch - upstream</changelog>
  <changelog author="sndirsch@suse.com" date="1598875200">- version 1.3.2 needed for jira#SLE/SLE-12880, jira#SLE/SLE-12882</changelog>
</package>
<package pkgid="2aa7930dea0dffd806fb41e2352a0ea3f558dcf1750c2ce1d758a997f729bd12" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="c2bf933f7478bc8953b3ba7ea9a8ab2b13e2d6d0bbb1c1324b000aa4de720559" name="libgmp10" arch="x86_64">
  <version epoch="0" ver="6.1.2" rel="4.9.1"/>
  <changelog author="rguenther@suse.com" date="1446465600">- Update to GMP 6.1.0 release.
  * New C++ functions gcd and lcm for mpz_class
  * New public mpn functions mpn_divexact_1, mpn_zero_p, and mpn_cnd_swap
  * New public mpq_cmp_z function, to efficiently compare rationals with
    integers
  * Support for more 32-bit arm processors
  * Support for AVX-less modern x86 CPUs
  * Speedups and bugfixes
- Includes gmp-6.0.0-ppc64-gcd.diff, now removed
- Update gmp keyring</changelog>
  <changelog author="astieger@suse.com" date="1466683200">- gmp 6.1.1:
  * Work around faulty cpuid on some recent Intel chips (this
    allows GMP to run on Skylake Pentiums).</changelog>
  <changelog author="mpluskal@suse.com" date="1467288000">- Use macro for configure (as bsc#870358) is already fixed
- Use xz compressed archives
- Update info pages dependencies</changelog>
  <changelog author="rguenther@suse.com" date="1483531200">- Update to GMP 6.1.2 release.
  * Mini-GMP: Fixed a division bug, which on a machine with 64-bit
    unsigned long affects approximately 1 out of 2^32 divisors.
  * Mini-GMP: Fix mpz_set_str crash on inputs with a large number of
    leading zeros. Also stricter input validation, rejecting inputs
    with no digits.
  * Handle more systems which require PIC code in static libraries (e.g.,
    "hardened" Gentoo and Debian 9).
  * Configuration for arm (-32 and -64) has been rewritten, fixing poor
    code selection for many CPUs.
  * Mini-GMP: Updated to the latest development version, including
    new functions mpn_com and mpn_neg.
- Add gmp-6.1.2-conftest.patch to fix configure test.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)
- Run spec-cleaner on the spec</changelog>
  <changelog author="coolo@suse.com" date="1590494400">- correct license statement (library itself is no GPL-3.0)</changelog>
  <changelog author="meissner@suse.com" date="1611921600">- adjusted to be the same license as in factory (bsc#1180603)</changelog>
  <changelog author="rguenther@suse.com" date="1637064000">- Add gmp-6.2.1-CVE-2021-43618.patch to fix buffer overflow on
  malformed input to mpz_inp_raw.  [bsc#1192717, CVE-2021-43618]</changelog>
</package>
<package pkgid="044ae1d7d8e4091aa5d02959398f8a7cf53ddaaa53889cbd8ae9f236a02aa5c1" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.16.1"/>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
  <changelog author="pmonreal@suse.com" date="1645444800">- Security fix: [bsc#1196167, CVE-2021-4209]
  * Null pointer dereference in MD_UPDATE
  * Add gnutls-CVE-2021-4209.patch</changelog>
</package>
<package pkgid="3a2221b6a23f0a55b1994097b998ca140a653dd12b6d471441f069f88e477d0b" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="14.16.1"/>
  <changelog author="vcizek@suse.com" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="vcizek@suse.com" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1621944000">- Add gnutls-3.6.7-fix-FTBFS-2024.patch to let tests pass after 2024 (boo#1186579)
- Add gnutls-3.6.7-reproducible-date.patch to override build date (boo#1047218)</changelog>
  <changelog author="pmonreal@suse.com" date="1645444800">- Security fix: [bsc#1196167, CVE-2021-4209]
  * Null pointer dereference in MD_UPDATE
  * Add gnutls-CVE-2021-4209.patch</changelog>
</package>
<package pkgid="64599b4335f5217ca72c1e8b0e8aacb6e0df6430aa8435e90731aa4cf892ee07" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="d48c010620b6beead6af3b14047c36b91f112f1307ce1927b0798cc31ba02f06" name="libgpg-error0" arch="x86_64">
  <version epoch="0" ver="1.29" rel="1.8"/>
  <changelog author="astieger@suse.com" date="1465992000">- update to 1.23:
  * Fixes an assertion failure due to es_flush on read/write streams.
  * Fixes a bug with a too short memory limit is es_fopenmen.
  * Interface changes relative to the 1.22 release:
    GPG_ERR_SUBKEYS_EXP_OR_REV       NEW.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- update to 1.24:
  * Fixes a bug in es_fclose_snatch when used used after es_fseek.
  * Fixes building without thread support.
  * New configure option --disable-tests.</changelog>
  <changelog author="astieger@suse.com" date="1479211200">- update to 1.25:
  * New interface gpgrt_get_syscall_clamp to allow libaries to make
    use of Libgpg-error's system call wrapper functions.
  * Fixed bug in the locking code when used with the nPth threading
    library.
  * Added new error codes.
  * Interface changes relative to the 1.23 release:
    gpgrt_get_syscall_clamp          NEW.
    GPG_ERR_ENGINE_TOO_OLD	     NEW.
    GPG_ERR_WINDOW_TOO_SMALL         NEW.
    GPG_ERR_WINDOW_TOO_LARGE         NEW.
    GPG_ERR_MISSING_ENVVAR	     NEW.
    GPG_ERR_USER_ID_EXISTS           NEW.
    GPG_ERR_NAME_EXISTS              NEW.
    GPG_ERR_DUP_NAME                 NEW.
    GPG_ERR_TOO_OLD                  NEW.
    GPG_ERR_TOO_YOUNG                NEW.</changelog>
  <changelog author="astieger@suse.com" date="1482408000">- update to 1.26:
  * New option --desc for gpg-error.
  * Interface changes relative to the 1.25 release:
  GPG_ERR_UNKNOWN_FLAG         NEW.
  GPG_ERR_INV_ORDER            NEW.
  GPG_ERR_ALREADY_FETCHED      NEW.
  GPG_ERR_TRY_LATER            NEW.
  GPG_ERR_SYSTEM_BUG           NEW.
  GPG_ERR_DNS_UNKNOWN          NEW.
  GPG_ERR_DNS_SECTION          NEW.
  GPG_ERR_DNS_ADDRESS          NEW.
  GPG_ERR_DNS_NO_QUERY         NEW.
  GPG_ERR_DNS_NO_ANSWER        NEW.
  GPG_ERR_DNS_CLOSED           NEW.
  GPG_ERR_DNS_VERIFY           NEW.
  GPG_ERR_DNS_TIMEOUT          NEW.</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- update to 1.27:
  * Added a Base64 decoder.
  * Added support for the sh3 architecture.
  * Added header gpgrt.h as an alias for gpg-error.h.
  * Fixed macro GPGRT_GCC_VERSION.
  * Interface changes relative to the 1.26 release:
  gpgrt_b64state_t                 NEW type.
  gpgrt_b64dec_start               NEW.
  gpgrt_b64dec_proc                NEW.
  gpgrt_b64dec_finish              NEW.
  GPG_ERR_WRONG_NAME               NEW.
  gpgrt.h                          NEW header.</changelog>
  <changelog author="kbabioch@suse.com" date="1520942400">- update to 1.28:
  * The formerly internal yat2m tool is now installed for a native build.
  * The new files gpgrt.m4 and gpgrt-config are now installed. They can
    be used instead of gpg-error.m4 and gpg-error-config.
  * New logging functions similar to those used by GnuPG.
  * New helper functions for platform abstraction.
  * Interface changes</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521720000">- Backport upstream patch to fix AArch64 build:
  * fix_aarch64.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 1.29:
  * The yat2m tool is during cross-compile now also installed on the
  host platform.
  * New option parser and associated functions similar to the one used
  by GnuPG.
  * New Base-64 encoder.
  * Fixes regression in 1.28 for arm64 and w64 builds.
- Dropped fix_aarch64.patch (included upstream now)</changelog>
  <changelog author="kbabioch@suse.com" date="1523448001">- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1524139200">- update signature files as more signatures got added
- refresh package signing keyring from upstream</changelog>
</package>
<package pkgid="bc325ac8fc2fdc888a834c908381fc71f8921b42cf0d4101cb33ed89a238adbf" name="libgpgme11" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="4.3.1"/>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="kbabioch@suse.com" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="tchvatal@suse.com" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="mgorse@suse.com" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="pmonreal@suse.com" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="751314ffd4fc78c153a5356d9905c2cf7b2d76f80a5be45f961b2dfa6e58c211" name="libgraphene-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="1.53"/>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Add baselibs.conf: produce libgraphene-1_0-0-32bit, required by
  gtk4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488628800">- Update to version 1.6.0:
  + The Meson dependency has been bumped to 0.37.0.
  + Added graphene_frustum_equal() method.
  + Dropped the -Denable-debug option for the Meson build;
    debugging levels are handled through the --buildtype Meson
    option; you can use release to disable all debugging code paths
    when building Graphene.
  + Graphene now automatically builds binaries for Windows (i686
    and x86_64) using Appveyor; you can find the builds attached to
    the release notes.</changelog>
  <changelog author="ro@suse.de" date="1502280000">- on i586, disable sse2 for the moment, otherwise the package
  fails in the testsuite on the "box" test</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Switch to python3:
  + Update the shebang in src/identfilter.py using sed.
  + Replace --identifier-filter-cmd=python in src/meson.build with
  - -identifier-filter-cmd=python3 (using sed).
  + Add python3-base BuildRequires: needed to have the python3
    interpreter present.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Update to version 1.6.2:
  + Mostly fixes for the Meson build, to ensure it's a bit more
    idiomatic and conforms to what newer versions of Meson expect
    from a project.
- Do a minor spec clean, use autosetup and license macros.
- Stop exporting LANG=C.UTF-8, fixed upstream.
- Stop exporting i586 conditional SUSE_ASNEEDED=0, fixed upstream.
- Pass explict enable-gtk-doc=true, enable-gobject-types=true,
  enable-introspection=true, enable-gcc-vector=true,
  enable-sse2=true and enable-arm-neon=true to meson, ensure we
  build the features we want.
- Following the above, add gtk-doc BuildRequires and package the
  now built documentation in devel subpackage.
- Stop using sed to ensure we are using python3, fixed upstream.
- Add fdupes BuildRequires and macro, remove duplicate files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519387200">- Update to version 1.8.0:
  + No new API, this cycle, but it's time to spin a new stable
    release.
  + The major news for this release is that we dropped the
    Autotools build from the repository; Graphene is now built
    exclusively with Meson.
  + We've added various fixes to the build on macOS, in order to
    maintain compatibility with the old Autotools build.
  + The variables in the pkg-config file that expose the SIMD
    functionality built inside Graphene have been updated, to
    ensure that they can be easily consumed by other projects;
    instead of a single string that needs to be split, we now
    expose boolean variables for all SIMD implementations.
  + We've also improved the ability to use Graphene as a Meson
    sub-project; this allows Meson to check out, build, and depend
    on Graphene when building complex projects, like GTK. This is
    really useful inside CI pipelines, as it minimises the amount
    of separate steps needed when setting up the build.
- Update options passed to meson, following upstream changes:
  gtk_doc=true, gobject_types=true, introspection=true,
  gcc_vector=true, sse2=true, arm-neon=true, tests=true and
  benchmarks=true.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528977600">- Update to version 1.8.2:
  + The main change is that we've now disabled SIMD optimisations
    on 32 bit Intel architectures; there aren't many of those left,
    and in general compilers have been less than stellar when
    supporting SIMD types on them. This is especially problematic
    when it comes to using Graphene types inside other allocated
    structures, where SIMD alignment rules break system allocators
    on platforms like Windows. To avoid introducing weird bugs, if
    you're on 32 bit IA, you're only going to have access to the
    scalar SIMD implementation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553515200">- Update to version 1.8.6:
  + Bug fixes, bug fixes everywhere! Also: documentation changes to
    clarify what we do behind the veil of the various matrix
    multiplication functions. Hopefully, this should help people
    using Graphene especially when it comes to integration with
    other libraries.
  + Fix matrix multiplication when the result matrix is also one of
    the operands.
  + Fix check when converting a 4x4 matrix into an affine
    transformation matrix.
  + Fix interpolation between matrices with a perspective
    component.
  + Documentation fixes for matrix/matrix and matrix/vector
    multiplication operators.
- Changes from version 1.8.4:
  + Mostly a bug fixing release, with an especially glaring bug fix
    in the point transformation function of graphene_matrix_t that
    was found thanks to GTK 4. Now the function is covered by the
    test suite, so it should not regress.
  + Another major fix is the ensuring that we have a description of
    the SIMD types through introspection, which means that language
    bindings can finally know how big every other structure using
    them is. The SIMD API is still not available through
    introspection, as it's a pure C convenience.
  + Require Meson ? 0.48.0.
  + Fix matrix/point transformation.
  + Build fixes for MSVC.
  + Introspection fixes for bool.
  + Fix the InitOnce checks on Windows.
  + Correctly parse SIMD types for introspection.
  + Build fixes for the pkg-config file.
  + Documentation fixes:
  - Clarify matrix/vector/point multiplication.
  - Clarify plane description.
  - Clarify the units for the matrix skew factors.
  - Document use of graphene-gobject with Meson.</changelog>
  <changelog author="luke@ljones.dev" date="1567771200">- Update to version 1.9.6:
  + Add radians based initialisers for graphene_euler_t.
  + Use pragma once for the header inclusion guard.
  + Remove unused function (#159)
  + Add multiply(), scale(), and add() operators to
    graphene_quaternion_t.
  + Add lerp() operator to all vector types.
  + Add graphene_plane_transform()
  + Documentation updates for graphene_ray_t.
  + Fix graphene_box_get_center() and.
    graphene_box_get_bounding_sphere() (#165)
  + Ensure that we detect empty or infinite boxes in the.
    graphene_box_t API.
- Changes from version 1.9.4:
  + Graphene now uses an ancillary library called Test for its
    test suite; this means it's possible to build and run the test
    suite without necessarily depending on GLib.
  + the conversion of the Euler angles type to and from matrices and.
    quaternions has been rewritten from scratch, and should not only
    be finally correct, but it should also cover more use cases?namely
    the "proper" Euler angles as well as the Tait?Bryan angles.
  + the ARM NEON implementation of the SIMD types has been improved,
    fixed, and tested, so it's not marked as experimental any more.
  + Require Meson ? 0.50.1.
  + Fix graphene_quaternion_equal() to consider the orientation, not
    just the component equality.
  + Fix graphene_quaternion_slerp() to always interpolate along the
    shortest path.
  + Re-implement the conversion of graphene_euler_t to and from
    graphene_matrix_t and graphene_quaternion_t.
  + Add graphene_rectangle_get_area()
  + Document restrictions of graphene_rect_round(), and deprecate the function.
  + Add graphene_rect_round_extents()
  + Port the test suite from GLib's testing utilities to Test.
  + Remove internal floating point comparisons.
  + Improve the NEON extensions detection code.
  + Fix comparison operators for graphene_simd4f_t on ARM using the
    NEON extensions.
  + Remove the "experimental" compiler warning from the ARM NEON
    implementation of graphene_simd4f_t.
- Changes from version 1.9.2:
  + Add graphene_rect_scale() method.
  + Fix warning from Meson by dropping unnecessary argument to.
    configure_file()
  + Clean up arguments of pkgconfig.generate()
  + Add equality operators to graphene_matrix_t.
  + Add getters for translation components of a graphene_matrix_t.
  + Use darwin_versions argument instead of rolling our own.
  + Add GRAPHENE_RECT_INIT_ZERO</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 1.10.0:
  + API additions, mostly driven by Gthree:
  - Add graphene_matrix_decompose().
  - Add intersection methods to graphene_ray_t.
  - graphene_triangle_init_from_float().
  - graphene_triangle_get_uv().
  + Fix graphene_ray_transform().
  + Documentation fixes.</changelog>
</package>
<package pkgid="487167ced291c6f3978c2ed773945af17eb82b4a799cf4d35fa7da3f80a7fb5f" name="libgraphite2-3" arch="x86_64">
  <version epoch="0" ver="1.3.11" rel="2.12"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Version update to 1.3.8:
  * Various bugfixes found by fuzzers</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- Version update to 1.3.9: fixes some bugs in the collision
  avoidance and may give slightly improved results in some cases.</changelog>
  <changelog author="pgajdos@suse.com" date="1493035200">- security update:
  * CVE-2017-5436 [bsc#1035204]
    + graphite2-CVE-2017-5436.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498046400">- Use %ctest macro
- Update license string to lgpl2.1+ and mpl2.0+
- Remove patch graphite2-CVE-2017-5436.patch
- Update to 1.3.10:
  * Upstream marks this as contianing various bugfixes without
    any specific mentions</changelog>
  <changelog author="mpluskal@suse.com" date="1511179200">- Add patches to fix tests when using python3:
  * graphite2-python3_tests.patch
  * graphite2-python3_tests_cornercases.patch
- Refresh all other patches
- Use fancy name for downloaded tarball
- Run spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1512475200">- Make sure we switch to python3 only on SLE15+ and not on SLE12</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Do not BR asciidoc as we do not install the generated html page</changelog>
  <changelog author="schwab@suse.de" date="1518696000">- gcc8.patch: return correct value from stream operator</changelog>
  <changelog author="pgajdos@suse.com" date="1520856000">- Update to 1.3.11:
- removed patches (upstreamed or not needed)
  * gcc8.patch (code commeted out)
  * graphite-nonvoid-return.patch (code commented out)
  * graphite2-python3_tests.patch (upstreamed)
  * graphite2-python3_tests_cornercases.patch (upstreamed
- refreshed patch
  * link-gcc-shared.diff
- fixes security issue: CVE-2018-7999 [bsc#1084850]
  + graphite2-CVE-2018-7999.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Use python3 everywhere
- Drop fonttools test dep as it pulls TON of py3 packages</changelog>
</package>
<package pkgid="d3b2fb83dfa9acbbbe99a40290b9d3b6cf8304d0e84b8463bb1b31e0a103ebea" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="61a228c10cd96ee789982a92c6377dd03841114e38e553647dae582dcac59ff8" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="17a25cde2e5681f2ab6a11cf45de5f143222d7e63a8beed67e3a24e2d91ee3dc" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3a585e6f249f48e2ddd1f53abbfa58d4017014c4c4dd16bf3a85c31d45454a75" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4b06d118fbbe569d45f4f073ef9852d3564131374d78b6abff172549486dfc57" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="e9cc57354277fcb01c58b8bd91659591b1c2060b5584edaee795df1bba024350" name="libgstreamer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="12340dd4a632166de66fe18cfd50ee2debc8d3ee7832d2f8a057737983f3f3ff" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="df75ac9ae88748c35b08b4b8dcf245a8a03bf8461399fde33ba1d2fd0fc57e04" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bce65a5eae421295e4d9ff6d5d2df9dc67523df14abd54fe976f8ba7985ef088" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="8e694c32f62d19ff976cb2f349cdf74e945ca5ff5c16ed25d1400b5cdee4781d" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
  <changelog author="fcrozat@suse.com" date="1623931200">- Add gtk3-fix-avahi-printers.patch: Ensure printers entries from
  Avahi are usable (bsc#1094486, bsc#1189238).</changelog>
</package>
<package pkgid="529aa420e954a3aa45eda232b55a06833954f60d53de8db8272867ab766aea35" name="libgudev-1_0-0" arch="x86_64">
  <version epoch="0" ver="232" rel="1.33"/>
  <changelog author="crrodriguez@opensuse.org" date="1432036800">- Split from systemd/udev.</changelog>
  <changelog author="zaitor@opensuse.org" date="1433246400">- Update to version 230:
  + Bump version number so the package will supercede any gudev
    sub-packages provided via systemd. We intend to drop gudev from
    systemd-221, but lets be safe and just bump it to 230 now.</changelog>
  <changelog author="jengelh@inai.de" date="1434715200">- Transplant baselibs.conf from systemd.spec. Update package
  metadata.</changelog>
  <changelog author="dimstar@suse.com" date="1443182400">- Enable build (dummy change for repo_checker, as libgudev was
  wrongly already checked in to openSUSE:Factory, but has since
  been disabled). With this, we can activate the Staging properly.</changelog>
  <changelog author="fbui@suse.com" date="1458648000">- Import libgudev from Factory to SLE (fate#320658):
  new versions of systemd doesn't ship libgudev anymore and a
  dedicated package has been created and should be used instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Update to version 231:
  + Fix a bug in the enumerator to ensure that client subsystems
    are implicitly matched.
  + Require a newer GLib to simplify some code.
- Add disabled pkgconfig(umockdev-1.0) BuildRequires, new
  optional dependency, that is enabled by default upstream, but
  unfortunatly not yet available in openSUSE.
- Following the above: pass --disable-umockdev to configure.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 232:
  + Fix crash on plenty of architectures in the test suite.
  + Add g_autoptr automatic clean up for libgudev objects.
- Tweak package description a bit.</changelog>
</package>
<package pkgid="e6bf70995fdfa852054ace73b4a71760df85dca4e28f89f0671015a66a7b7fc1" name="libguestfs0" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="13.73"/>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="ldewey@suse.com" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="ldewey@suse.com" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1566475200">- Remove empty /etc/libguestfs-tools.conf</changelog>
  <changelog author="gmoro@suse.com" date="1566993600">- Add sysconfig-netconfig to appliance (boo#1136878)
  Patches added:
    netconfig.patch</changelog>
  <changelog author="ldewey@suse.com" date="1568030400">- Added lvm2 to Requires for using virt-resize of xfs images.
  (bsc#1138860)</changelog>
  <changelog author="christophe@krop.fr" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="carnold@suse.com" date="1584619200">- bsc#1167131 - virt-v2v fails importing ubuntu 18.04 LTS ova
  500acb15-v2v-linux-fix-kernel-detection-when-split-in-different-packages.patch</changelog>
  <changelog author="carnold@suse.com" date="1604577600">- bsc#1178495 - Leap Gap: Libguestfs.spec contains the is_opensuse
  macro
  libguestfs.spec</changelog>
</package>
<package pkgid="253798ab6242973cdfe0fcb4f26050a3f1638fdb9b782260be86a51d111aefb0" name="libharfbuzz0" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="1.56"/>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.7.6:
  + Fix to hb_set_t binary operations. Ouch.
  + New experimental harfbuzz-subset library. All of hb-subset.h is
    experimental right now and API WILL change.
  + New API:
  - hb_blob_copy_writable_or_fail().
  - HB_OT_TAG_BASE.
  - hb_set_previous().
  - hb_set_previous_range().
- Split out new sub-package libharfbuzz-subset0.
- Add libharfbuzz-gobject0 and libharfbuzz-subset0 to baselibs.
- Use make_build macro.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529150400">- Update to version 1.8.1:
  + Add correctness bug in hb_set_t operations, introduced in
    1.7.7.
- Changes from version 1.8.0:
  + Update to Unicode 11.0.0.
- Changes from version 1.7.7:
  + All HarfBuzz objects are significantly smaller in size now.
  + Sinhala: Position repha on top of post-consonant, not base.
  + Significant libharfbuzz-subset changes. API subject to change.
  + New API in libharfbuzz: hb_blob_create_from_file() and
    hb_face_count().
- Add missing post(un) ldconfig scriptlets for libharfbuzz-subset
  shared library.</changelog>
  <changelog author="tchvatal@suse.com" date="1538654400">- Update to 1.9.0:
  * Various gcc warning fixes
  * New Face-builder API
  * Internal source header name changes
  * Major Khmer shaper improvements
  * Couple of Indic bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1552910400">- Update to 2.3.1:
  * too many changes to ever iterate, see NEWS for the details</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Update to version 2.5.3:
  + Fix UCD script data for Unicode 10+ scripts. This was broken
    since 2.5.0.
  + More optimizations for HB_TINY.
- Changes from version 2.5.2:
  + More hb-config.hh facilities to shrink library size, namely
    when built as HB_TINY.
  + New documentation of custom configurations in CONFIG.md.
  + Fix build on gcc 4.8. That's supported again.
  + Universal Shaping Engine improvements.
  + API Changes: Undeprecate some horizontal-kerning API and
    re-enable in hb-ft, such that Type1 fonts will continue
    kerning.
- Changes from version 2.5.1:
  + Fix build with various versions of Visual Studio.
  + Improved documentation.
  + Bugfix in subsetting glyf table.
  + Improved scripts for cross-compiling for Windows using mingw.
  + Rename HB_MATH_GLYPH_PART_FLAG_EXTENDER to
    HB_OT_MATH_GLYPH_PART_FLAG_EXTENDER. A deprecated macro is
    added for backwards-compatibility.
- Changes from version 2.5.0:
  + This release does not include much functional changes, but
    includes major internal code-base changes. We now require
    C++11. Support for gcc 4.8 and earlier has been dropped.
  + New hb-config.hh facility for compiling smaller library for
    embedded and web usecases.
  + New Unicode Character Databse implementation that is half the
    size of previously-used UCDN.
  + Subsetter improvements.
  + Improved documentation.
  + isc shaping fixes.
- Changes from version 2.4.0:
  + Unicode 12.
  + Misc fixes.
  + Subsetter improvements.
  + New API: HB_BUFFER_FLAG_DO_NOT_INSERT_DOTTED_CIRCLE and
    hb_directwrite_face_create().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568376000">- Update to version 2.6.1:
  + Fix regression with hb_font_create_sub_font scaling introduced
    in 2.6.0.
  + Change interpretation of font PTEM size / CoreText font size
    handling.
  + hb-ot-font: Prefer symbol cmap subtable if present.
  + Apply 'dist'/'abvm'/'blwm' features to all scripts.
  + Drop experimental DirectWrite API.
- Changes from version 2.6.0:
  + New OpenType metrics, baseline, and metadata table access APIs.
  + New API to set font variations to a named-instance.
  + New hb-gdi.h header and API for creating hb_face_t from HFONT.
  + Amalgam: Provide a single-file harfbuzz.cc file for easier
    alternate building.
  + More size-reduction configurable options, enabled by HB_TINY.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570104000">- Update to version 2.6.2:
  + Misc small fixes, mostly to build-related issues.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1570363200">- add upstream sigining keyring and verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1572350400">- update to 2.6.3:
  + Misc small fixes, mostly to build-related issues
  + New API: hb_font_get_nominal_glyphs()</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574596800">- update to 2.6.4:
  + small bug fixes and build fixes</changelog>
</package>
<package pkgid="c2417d96c3e69964206a8d0d68de1485edef4fb66a23372a5f34e58e17de8062" name="libhavege1" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="6.1"/>
  <changelog author="meissner@suse.com" date="1424174400">- haveged-dracut.module: include haveged into the initrd for
  randomness generation. bsc#898669
- haveged.service: adjust so it is started before journald
  and also make sure it is shutdown quite late. bsc#898669
- regenerate initrd on installation. bsc#898669</changelog>
  <changelog author="dmueller@suse.com" date="1443528000">- add fix-enforced-clock-gettime.patch to fix build on generic
  platforms like e.g. aarch64, which is only needed due to
  our (non-recommended choice) of using gettime (fate#318370)</changelog>
  <changelog author="meissner@suse.com" date="1443614400">- modules-setup.sh should be module-setup.sh in dracut, also 755
- add dependency on systemd-journald.socket to make haveged
  really start before journald in the initrd. bsc#898669</changelog>
  <changelog author="meissner@suse.com" date="1444392000">- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs</changelog>
</package>
<package pkgid="274bbf58f3b5d2ba0eeb85fc6d5a66a744c6d6b202d6b55baac45ae99873b2f0" name="libhivex0" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.6.1"/>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
  <changelog author="carnold@suse.com" date="1629979200">- bsc#1189060 - VUL-0: CVE-2021-3622: hivex: hivex: stack overflow
  due to recursive call of _get_children()
  CVE-2021-3622-stack-overflow-due-to-recursive-call-of-_get_children.patch</changelog>
</package>
<package pkgid="1cb1f01ae218566912330b9bff2d819515166d461af57cb6b60e5605992852cc" name="libhogweed4" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="9b7dd8a7341882e4ba26c915b20c21f60eb70e1f74a1a8a4db13a23977bf433f" name="libhugetlbfs" arch="x86_64">
  <version epoch="0" ver="2.20" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1392120000">- Tests compile fine for s390(x), also include them in the package, the same
  way it is done for other archs as well.</changelog>
  <changelog author="dmueller@suse.com" date="1395835200">- update to 2.17:
  * PPC segement alignment restrictions can be disabled
  * Added Aarch64 support
  * Allow compiler overrides for 64 and 32 bit builds
  * hugeadm now handles /etc/mtab being a simlink properly
  * ppc64 fixes
- remove libhugetlbfs.ia64-libdir.patch:
  ia64 is no longer supported by openSUSE
- add ignore-perl-modules.diff: do not install perl modules, unused
  and are installed in the wrong place to be found anyway
- add ARM support
- add disable-rw-on-non-ldscripts.diff: Skip rw tests
- Do not install tests anymore</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="5a0e642b7b08d1240d71ab151ad9692f41b17de7b70ca565426af9d5f2274a27" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="1e3b1f45a837496173c5065118c96b647b8255a366618a7070e64bb3b85925b6" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="03080c98aeee28c95e84bfc0aee5af25fe5bb948404b2cda0b33d333cdd41662" name="libicu-suse65_1" arch="x86_64">
  <version epoch="0" ver="65.1" rel="4.2.1"/>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (??). (boo#1112183, bnc#1103893,
    FATE#325570)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
</package>
<package pkgid="ef830d6622f5b346488caaf85d11535392ede5a41d61caf71cc0cf3e0cf81cee" name="libicu65_1-ledata" arch="noarch">
  <version epoch="0" ver="65.1" rel="4.2.1"/>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (??). (boo#1112183, bnc#1103893,
    FATE#325570)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
</package>
<package pkgid="dfe93f3850f93c3846e5088716eaa4384d28753faae97e5dd41d8cea490ce797" name="libidn11" arch="x86_64">
  <version epoch="0" ver="1.34" rel="3.2.2"/>
  <changelog author="tchvatal@suse.com" date="1426248000">- Version bump to 1.30:
  * punycode.{c,h} files were reimported
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1436443200">- Version bump to 1.31:
  * Fixes bnc#923241 CVE-2015-2059 out-of-bounds read with stringprep on
    invalid UTF-8
  * Few other triv changes</changelog>
  <changelog author="tchvatal@suse.com" date="1436443201">- Add Apache-2.0 license to the license line. Under this is the
  java code, but we don't build it -&gt; just the sources license</changelog>
  <changelog author="mpluskal@suse.com" date="1439467200">- Update to 1.32
  * libidn: Fix crash in idna_to_unicode_8z8z and
    idna_to_unicode_8zlz. This problem was introduced in 1.31.
  * API and ABI is backwards compatible with the previous version.
- Update gpg keyring</changelog>
  <changelog author="astieger@suse.com" date="1469016000">- libidn 1.33:
  * bnc#990189 CVE-2015-8948 CVE-2016-6262
  * bnc#990190 CVE-2016-6261
  * bnc#990191 CVE-2016-6263
  * libidn: Fix out-of-bounds stack read in idna_to_ascii_4i.
  * idn: Solve out-of-bounds-read when reading one zero byte as input.
  * libidn: stringprep_utf8_nfkc_normalize reject invalid UTF-8.</changelog>
  <changelog author="tchvatal@suse.com" date="1491307200">- Add patches to build with gcc7:
  * libidn-gcc7-part1.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1522065600">- Add patch to fix bsc#1056450 CVE-2017-14062:
  * libidn-CVE-2017-14062.patch</changelog>
  <changelog author="jengelh@inai.de" date="1522065601">- Update summaries. Remove ineffective --with-pic.</changelog>
  <changelog author="astieger@suse.com" date="1522497600">- libidn 1.34 (bsc#1087709):
  * libidn: Fix integer overflow in combine_hangul()
  * libidn: Fix integer overflow in punycode decoder
    drop previously patched libidn-CVE-2017-14062.patch
  * libidn: Fix performance issue in idna_to_unicode_internal()
  * libidn: Fix performance issue in stringprep functions.
  * libidn: Fix NULL pointer dereference in g_utf8_normalize()
  * libidn: Fix NULL pointer dereference in stringprep_ucs4_nfkc_normalize()
  * libidn: Increase performance of stringprep functions
  * testing: Add OSS-fuzz integration and regression testing
  * build: Update gnulib files
  * build: Modernize GTK-Doc build
  * build: Fix parallel builds
  * build: Add configure flag --disable-doc
  * build: Add configure flag --enable-ubsan (enable UB Sanitizer)
  * build: Add configure flag --enable-asan (enable Address Sanitizer)
  * build: Fix compiler warnings
  * build: Fix build for gcc-7
    drop reviously patched libidn-gcc7-part1.patch
  * i18n: Added Swedish translation
- update upstream signing key from website</changelog>
</package>
<package pkgid="ec67ebeebde098ec190844252e08c13701eefb20ddfed6174cad58c968b45b6d" name="libidn2-0" arch="x86_64">
  <version epoch="0" ver="2.2.0" rel="3.6.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1493035200">- Update to version 2.0.1
- Version 2.0.1 (released 2017-04-22)
  * idn2 utility now using IDNA2008 + TR46 by default
- Version 2.0.0 (released 2017-03-29) [alpha]
  * Version numbering scheme changed
  * Added to ASCII conversion functions corresponding to libidn1
    functions:
  - idn2_to_ascii_4i		- idn2_to_ascii_4z
  - idn2_to_ascii_8z		- idn2_to_ascii_lz
  * Added to unicode conversion functions corresponding to libidn1
    functions:
  - idn2_to_unicode_8z4z	- idn2_to_unicode_4z4z
  - idn2_to_unicode_44i	- idn2_to_unicode_8z8z
  - idn2_to_unicode_8zlz	- idn2_to_unicode_lzlz
  * Including idn2.h will provide libidn1 compatibility functions
  unless IDN2_SKIP_LIBIDN_COMPAT is defined. That allows converting
  applications from libidn1 (which offers IDNA2003) to libidn2 (which
  offers IDNA2008) by replacing idna.h to idn2.h in the applications'
  source.
- Dropped patch not needed after revision
  * libidn2-no-examples-build.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Sources updated from http://alpha.gnu.org to https://ftp.gnu.org</changelog>
  <changelog author="astieger@suse.com" date="1495281600">- update to 2.0.2:
  * Fix TR46 transitional mode
  * Fix several documentation issues</changelog>
  <changelog author="astieger@suse.com" date="1500897600">- update to 2.0.3:
  * %IDN2_USE_STD3_ASCII_RULES disabled by default.
    Previously libidn2 was eliminating non-STD3 characters from
    domain strings such as _443._tcp.example.com, or IPs such as
    1.2.3.4/24 provided to libidn2 functions. That was an
    unexpected regression for applications switching from libidn
    and thus it is no longer applied by default.
    Use %IDN2_USE_STD3_ASCII_RULES to enable that behavior again.
- disable documentation, does not build correctly</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 2.0.4:
  * Fix integer overflow in bidi.c/_isBidi() bsc#1056451
  * Fix integer overflow in puny_decode.c/decode_digit()
    bsc#1056450
  * Fix idna_free() to idn_free()
- enable documentation again</changelog>
  <changelog author="astieger@suse.com" date="1527508800">- update to 2.0.5:
  * Switch the default library behavior to IDNA2008 as amended by
    TR#46 (non-transitional). That default behavior is enabled when
    no flags are specified to function calls. Applications can
    utilize the %IDN2_NO_TR46 flag to switch to the unamended
    IDNA2008. This is done in the interest of interoperability
    based on the fact that this is what application writers care
    about rather than strict compliance with a particular protocol
  * Fixed memory leak in idn2_to_unicode_8zlz()
  * Return error (IDN2_ICONV_FAIL) on charset conversion errors
  * Fixed issue with STD3 rules applying in non-transitional TR46
    mode
  * idn2: added option --usestd3asciirules
- put translations into libidn2-lang
- correct location of install_info_prereq macro to be on tools</changelog>
  <changelog author="astieger@suse.com" date="1546689600">- update to 2.1.0:
  * Two internal functions are no longer exposed, soname bump
  * Fix label length check for idn2_register_u8()
  * Add missing error messages to idn2_strerror_name()</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1550664000">- update to 2.1.1 CVE-2019-18224 bsc#1154887:
  * Revert SONAME bump from release 2.1.0
  * Fix NULL dereference in idn2_register_u8() and
    idn2_register_ul()
  * Fix free of random value in idn2_to_ascii_4i()
  * Improved fuzzer (which found the above issues)
  * Check for valid unicode input in punycode encoder
  * Avoid excessive CPU usage in punycode encoding with
    large inputs
  * Deprecate idn2_to_ascii_4i() in favor of idn2_to_ascii_4i2()
  * Restrict output length of idn2_to_ascii_4i() to 63 bytes</changelog>
  <changelog author="mpluskal@suse.com" date="1559044800">- Update to version 2.2.0 CVE-2019-12290 bsc#1154884:
  * Perform A-Label roundtrip for lookup functions by default
  * Stricter check of input to punycode decoder
  * Fix punycode decoding with no ASCII chars but given delimiter
  * Fix 'idn2 --no-tr64' (was a no-op)
  * Allow _ as a basic code point in domain labels
  * Fail building documentation if 'ronn' isn't installed
  * git tag changed to reflect https://semver.org/</changelog>
  <changelog author="meissner@suse.com" date="1608552000">- The library is actually dual licensed, GPL-2.0-or-later or LGPL-3.0-or-later,
  match factory licenses (bsc#1180138)</changelog>
</package>
<package pkgid="db9e3ef784ede01d979261987d354d88c26a60d16f585e489c1ed8646ec8a450" name="libindicator3-7" arch="x86_64">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="1.12"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="97544f97711d0b05553fa1871df4b9062103fd2356373e10df6921728acde5a8" name="libini_config5" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="scabrero@suse.de" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="f5a22a570ca2d328e56c595e00b2df4491a662322e814b4e0f7d3851526a97f2" name="libip4tc2" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.8.2
  * Fix incorrect handling of various targets and options in
    iptables-nft,ebtables-nft,arptables-nft.</changelog>
  <changelog author="kstreitova@suse.com" date="1554379200">- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
  where 'iptables -L' reads garbage from the struct as the kernel
  never filled it in the bugged case. This can lead to issues like
  mapping a few TiB of memory [bsc#1106751].</changelog>
  <changelog author="jengelh@inai.de" date="1558526400">- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
  0001-include-extend-the-headers-conflict-workaround-to-in.patch
  to fix build with older linux-glibc-devel. [boo#1132821]</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.8.3
  * ebtables: Fix rule listing with counters
  * ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
  0001-include-fix-build-with-kernel-headers-before-4.2.patch
  (upstreamed)</changelog>
  <changelog author="kstreitova@suse.com" date="1567771200">- add missing Provides/Obsoletes for the renamed package
  iptables-backend-nft (was iptables-nft)</changelog>
  <changelog author="kstreitova@suse.com" date="1569844800">- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.8.4
  * Fix for wrong counter format in `ebtables-nft-save -c` output.
  * Print typical iptables-save comments in arptables- and
    ebtables-save, too.
  * xt_owner: add --suppl-groups option
  * Remove support for /etc/xtables.conf
  * Restore support for "-4" and "-6" options in rule lines.</changelog>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
</package>
<package pkgid="4b15432f4861b4d21809411d66ccb6ec209a1e078081fdefeabf05a03983dff5" name="libip6tc2" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.8.2
  * Fix incorrect handling of various targets and options in
    iptables-nft,ebtables-nft,arptables-nft.</changelog>
  <changelog author="kstreitova@suse.com" date="1554379200">- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
  where 'iptables -L' reads garbage from the struct as the kernel
  never filled it in the bugged case. This can lead to issues like
  mapping a few TiB of memory [bsc#1106751].</changelog>
  <changelog author="jengelh@inai.de" date="1558526400">- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
  0001-include-extend-the-headers-conflict-workaround-to-in.patch
  to fix build with older linux-glibc-devel. [boo#1132821]</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.8.3
  * ebtables: Fix rule listing with counters
  * ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
  0001-include-fix-build-with-kernel-headers-before-4.2.patch
  (upstreamed)</changelog>
  <changelog author="kstreitova@suse.com" date="1567771200">- add missing Provides/Obsoletes for the renamed package
  iptables-backend-nft (was iptables-nft)</changelog>
  <changelog author="kstreitova@suse.com" date="1569844800">- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.8.4
  * Fix for wrong counter format in `ebtables-nft-save -c` output.
  * Print typical iptables-save comments in arptables- and
    ebtables-save, too.
  * xt_owner: add --suppl-groups option
  * Remove support for /etc/xtables.conf
  * Restore support for "-4" and "-6" options in rule lines.</changelog>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
</package>
<package pkgid="13b4833e6f8ced4a915820724fdd9de14f42eae44972a54a2eb130c8e1a19112" name="libipset11" arch="x86_64">
  <version epoch="0" ver="6.36" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1458129600">- Update to new upstream release 6.29
  * Fix race condition in ipset save, swap and delete</changelog>
  <changelog author="jengelh@inai.de" date="1476964800">- Update to new upstream release 6.30
  * hash:ipmac type support added to ipset</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 6.31
  * ipset: avoid kernel null pointer exception in ipset list:set
  * fix bug: sometimes valid entries in hash:* types of sets were
    evicted
- Update to new upstream release 6.32
  * fix possible truncated output in ipset output buffer handling</changelog>
  <changelog author="kstreitova@suse.com" date="1505476800">- fix build for Factory</changelog>
  <changelog author="jengelh@inai.de" date="1505649600">- Update to new upstream release 6.33
  * Report if the option is supported by a newer kernel release
- Add ipset-6.33-export-func.diff</changelog>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x?255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="kstreitova@suse.com" date="1548849600">- add ipset-6.36_service_names_for_ports.patch to fix parsing
  service names for ports. Parsing is attempted both for numbers
  and service names and the temporary stored error message
  triggered to reset the state parameters about the set
  [bsc#1122853]</changelog>
</package>
<package pkgid="5fc01e89bc53769dc7967800c73feacebccc287090eff07bdbb7a476afa9cb2e" name="libiscsi8" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="4.29"/>
  <changelog author="mpluskal@suse.com" date="1448539200">- Initial package for libscsi 1.15.0</changelog>
  <changelog author="mpluskal@suse.com" date="1462449600">- Update to 1.16.0
  * Various test updates.
  * Add tests for ExtendedCopy and ReceiveCopyResults
  * Add support for WRITE_ATOMIC_16 and tests
  * Multipath tests added
  * Persistent Reservation test updates.
  * Make sure to process target NOPs in the tests
  * Fix broken CHAP has handling.</changelog>
  <changelog author="mpluskal@suse.com" date="1462881600">- Update to 1.17.0 (fate#320080)
  * Bugfix for a rare condition where if a  DATA-OUT PDU has a
    callback registered, it can cause a crash on reconnect/timeout.</changelog>
  <changelog author="mpluskal@suse.com" date="1478433600">- Update to version 1.18.0:
  * Various test updates
  * Add support for iSER
  * Add support for zero-copy reads</changelog>
  <changelog author="jengelh@inai.de" date="1478433601">- Resolve orthographic problems in description</changelog>
  <changelog author="mpluskal@suse.com" date="1478433602">- Exclued from building on 32 bit architectures</changelog>
  <changelog author="msuchanek@suse.com" date="1479124800">- Fix 32bit build (gh#sahlberg/libiscsi#221, boo#1009456)
  * libiscsi-1.18.0-Fix-32bit-build.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1491048000">- Do not build with -Werror</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Morernise spec file with spec-clener</changelog>
  <changelog author="mpluskal@suse.com" date="1529668800">- Fix building of recent rdma (boo#1098749):
  * libiscsi-rdma.patch</changelog>
</package>
<package pkgid="b8543ce0d9cd6985b9dd14d89b4eadadf1e3cd0875d288e09277c3487642fbfe" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.9" rel="1.24"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
</package>
<package pkgid="23bbb181d3a9d69944769951a5cb552d576f20adcb0b67a51ce884f7735530e7" name="libjbig2" arch="x86_64">
  <version epoch="0" ver="2.1" rel="3.2.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
</package>
<package pkgid="f350a6c60e93074b961ab6c1a45eb77b2b359dd81159401fd14c0e3309204ed9" name="libjpeg8" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="32.2.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3acf591bb6094b81e82fe2b6069e7dfc4d38ba996bfc7f9a0103fd802e348836" name="libjq1" arch="x86_64">
  <version epoch="0" ver="1.6" rel="3.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="c57ea3e167cc68bbe14eb0fdfb6e2afc806629f4ffdd4590e06a569f770690c2" name="libjson-c3" arch="x86_64">
  <version epoch="0" ver="0.13" rel="3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1362657600">- Update to 0.10 version :
  * Add a json_object_to_json_string_ext() function to allow output
  to be formatted in a more human readable form.
  * Add json_object_object_get_ex(), a NULL-safe get object method,
  to be able to distinguish between a key not present and the value
  being NULL.
  * Add an alternative iterator implementation, see json_object_iterator.h
  * Make json_object_iter public to enable external use of the
    json_object_object_foreachC macro.
  * Add a printbuf_memset() function to provide an effecient way to set and
    append things like whitespace indentation.
  * Adjust json_object_is_type and json_object_get_type so they return
    json_type_null for NULL objects and handle NULL passed to
    json_objct_object_get().
  * Rename boolean type to json_bool.
  * Fix various compile issues for Visual Studio and MinGW.
  * Allow json_tokener_parse_ex() to be re-used to parse multiple object.
    Also, fix some parsing issues with capitalized hexadecimal numbers and
    number in E notation.
  * Add json_tokener_get_error() and json_tokener_error_desc() to better
    encapsulate the process of retrieving errors while parsing.
  * Various improvements to the documentation of many functions.
  * Add new json_object_array_sort() function.
  * Fix a bug in json_object_get_int(), which would incorrectly return 0
    when called on a string type object.
    Eric Haszlakiewicz
  * Add a json_type_to_name() function.
    Eric Haszlakiewicz
  * Add a json_tokener_parse_verbose() function.
    Jehiah Czebotar
  * Improve support for null bytes within JSON strings.
    Jehiah Czebotar
  * Fix file descriptor leak if memory allocation fails in json_util
    Zachary Blair, zack_blair at hotmail dot com
  * Add int64 support. Two new functions json_object_net_int64 and
    json_object_get_int64. Binary compatibility preserved.
    Eric Haszlakiewicz, EHASZLA at transunion com
    Rui Miguel Silva Seabra, rms at 1407 dot org
  * Fix subtle bug in linkhash where lookup could hang after all slots
    were filled then successively freed.
    Spotted by Jean-Marc Naud, j dash m at newtraxtech dot com
  * Make json_object_from_file take const char *filename
    Spotted by Vikram Raj V, vsagar at attinteractive dot com
  * Add handling of surrogate pairs (json_tokener.c, test4.c, Makefile.am)
    Brent Miller, bdmiller at yahoo dash inc dot com
  * Correction to comment describing printbuf_memappend in printbuf.h
    Brent Miller, bdmiller at yahoo dash inc dot com
- Packaging :
  * upgrade upstream location https://gitub.com/json-c/json-c/wiki
  * cleanup old patches included now upstream
  . json-c-0.9-linkhash.patch
  . json-c-0.9-json_tokener.patch
  . json-c-0.9-json_object_from_file.patch
  . json-c-0.9-base.patch
  * Redone lfs patch against new 0.10 release
  * Removed empty NEWS file</changelog>
  <changelog author="coolo@suse.com" date="1362916800">- add json-c-fix-headers.patch from master branch to fix compilation
  of apps using the lib</changelog>
  <changelog author="fstrba@suse.com" date="1389009600">- Upgrade to 0.11 version:
  - SONAME change.
  - Fix provides and obsoletes accordingly
  - symlink the .pc file to the oldname for software that needs it
- Remove json-c-fix-headers.patch integrated upstream</changelog>
  <changelog author="jengelh@inai.de" date="1391515200">- Update metadata (description, RPM groups), and remove .la file
  in %install, not %check.</changelog>
  <changelog author="idonmez@suse.com" date="1396872000">- Add json-c-hash-dos-and-overflow-random-seed-4e.patch to fix
  CVE-2013-6370 and CVE-2013-6371 (bnc#870147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411214400">- json-c 0.12
  Fixes for security issues contained in this release have been
  previously patched into this package, but listed for completeness:
  * Address security issues:
  * CVE-2013-6371: hash collision denial of service
  * CVE-2013-6370: buffer overflow if size_t is larger than int
- Further changes:
  * Avoid potential overflow in json_object_get_double
  * Eliminate the mc_abort() function and MC_ABORT macro.
  * Make the json_tokener_errors array local.  It has been deprecated for
    a while, and json_tokener_error_desc() should be used instead.
  * change the floating point output format to %.17g so values with
    more than 6 digits show up in the output.
  * Remove the old libjson.so name compatibility support.  The library is
    only created as libjson-c.so now and headers are only installed
    into the ${prefix}/json-c directory.
  * When supported by the linker, add the -Bsymbolic-functions flag.
  * Make strict mode more strict:
  * number must not start with 0
  * no single-quote strings
  * no comments
  * trailing char not allowed
  * only allow lowercase literals
  * Added a json_object_new_double_s() convenience function to allow
    an exact string representation of a double to be specified when
    creating the object and use it in json_tokener_parse_ex() so
    a re-serialized object more exactly matches the input.
  * Add support NaN and Infinity
- packaging changes:
  * json-c-hash-dos-and-overflow-random-seed-4e.patch is upstream
  * Move from json-c-lfs.patch which removed warning errors and
    autoconf call to json-c-0.12-unused_variable_size.patch from
    upstream which fixes the warning
  * except for SLE 11 where autoreconf call is required
  * add licence file to main package</changelog>
  <changelog author="rpm@fthiessen.de" date="1468843200">- Update to upstream release 0.12.1
- Removed upstream fixed json-c-0.12-unused_variable_size.patch
- Added fix-set-but-not-used.patch</changelog>
  <changelog author="mliska@suse.cz" date="1490270400">- Added gcc7-fix.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- json-c 0.13
  + Deprecated and removed features:
  * Internal use of bits.h has been eliminated.
  * lh_abort() is deprecated
  + Behavior changes:
  * Tighten the number parsing algorithm to raise errors instead
    of truncating the results.  For example 12.3.4 or 2015-01-15,
    which now return null.
  * Use size_t for array length and size. Platforms where
    sizeof(size_t) != sizeof(int) may not be backwards compatible
  * Check for failue when allocating memory, returning NULL and
    errno=ENOMEM.
  * Change json_object_object_add() return type from void to int,
    and will return -1 on failures, instead of exiting. (Note:
    this is not an ABI change)
  + New features:
  * Aiming to follow RFC 7159 now.
  * Support for JSON pointer, RFC 6901 (see json_pointer.h)
  * Add a couple of additional option to json_object_to_json_string_ext:
  JSON_C_TO_STRING_PRETTY_TAB
  JSON_C_TO_STRING_NOSLASHESCAPE
  * json_object_object_add_ex() - better perf when certain
    constraints are known to be true
  * Serialization format of doubles now configurable
  * New functions
  - json_object_equal() - utility function for comparing
    json_objects
  - json_object_deep_copy() - a way to copy entire object
    trees
  - json_object_set_&lt;type&gt;() - modify the value of
    existing json_object's without the need to recreate them.
  Also add a json_object_int_inc function to adjust an int's'
  value.
  - json_util_get_last_err() - retrieve the string describing
    the cause of errors, instead of printing to stderr.
  - perllike hash function for strings
  * json_global_set_string_hash()
  * json_c_visit() - a way to iterate over a tree of json-c
    objects.
  + Notable bug fixes and other improvements:
  * Make reference increment and decrement atomic to allow
    passing json objects between threads.
  * Fix json_object_object_foreach to avoid uninitialized
    variable warnings.
  * Improve performance by removing unneeded data items from
    hashtable code and reducing duplicate hash computation.
  * Performance: store small strings inside json_object
  * Performance: of json_object_to_json_string by removing
    variadic printf
  * Fix parsing of "-Infinity", and avoid needlessly copying the
    input when doing so.
  * Fix stack buffer overflow in json_object_double_to_json_string_format()
  * Fix various potential null ptr deref and int32 overflows
  * Fix a long-standing bug in array_list_put_idx() where it
    would attempt to free previously free'd entries due to not
    checking the current array length.
  * use uselocale() instead of setlocale() in json_tokener to
    behave better in threaded environments.
  * Fix out of bounds read when handling unicode surrogate pairs.
  * Ensure doubles that happen to be a whole number are emitted
    with ".0"
  * Visual Studio: use a snprintf/vsnprintf wrapper that ensures
    the string is terminated.
  * Fix double to int cast overflow in json_object_get_int64.
  * Clamp double to int32 when narrowing in json_object_get_int.
  * Use strtoll() to parse ints - instead of sscanf
  * usual code linting
  + Build changes:
  * Add Appveyor and Travis build support
  * Support for MacOS and Windows through CMake
  * Silent build by default
  * Link against libm when needed
  * Add support for building with AddressSanitizer
  * Add support for building with Clang
  * Add a --enable-threading configure option, and only use the
    (slower) __sync_add_and_fetch()/__sync_sub_and_fetch()
    function when it is specified.
- cleanup with spec-cleaner
- remove fix-set-but-not-used.patch
  + fixed: https://github.com/json-c/json-c/issues/240
- remove gcc7-fix.patch
  + fixed in 014924ba899f659917bb64392bbff7d3c803afc2</changelog>
  <changelog author="ncutler@suse.com" date="1642161600">- Add patch bsc1171479.patch
  + fix integer overflow and out-of-bounds write (CVE-2020-12762, bsc#1171479)</changelog>
</package>
<package pkgid="31e5939e2c7b8c6c81cb46ea51c0485cb324524f3bcaba46eda047e1650f9aee" name="libjson-glib-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="2.27"/>
  <changelog author="zaitor@opensuse.org" date="1489924800">- Update to version 1.2.8:
  + Add missing header in the Meson file listing.
  + Ensure that introspection scans all the headers.
  + build:
  - Reduce the internal dependencies.
  - Add missing argument to the introspection scanner.
  - Ignore 'config.h' when building the API reference.
  - Generate the config.h file under json-glib.
  - Fix soversion for Meson builds.
  - Require the same modules for Meson and Autotools.
  - Sync the interface age with the version.
  + Fix the generated pkg-config file with Meson.
  + docs:
  - Add links to online resources.
  - Reference the JSON-GLib header.
  - Override version macros.
  - Use 'plain' language for JSON snippets.
  - Update the README.
  + Move the reference build down one level.
  + Use the appropriate values to initialize Autotools.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.3.2:
  + Use Meson as the only build system.
  + Bugs fixed: bgo#773504, bgo##780550, bgo#769206, bgo#766281,
    bgo#758580, bgo#768788, bgo#774688.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Trim descriptions a little. Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 1.4.0:
  + Update the linker flags on macOS (bgo#785053).
  + Change the build configuration options to better fit with
    Meson.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217601">- Update to version 1.4.2:
  + Literally no change, just a re-released tarball. The tarball
    generated for 1.4.0 and pushed to download.gnome.org comes from
    a different commit.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="sbrabec@suse.com" date="1524744000">- Set gettext domain explicitly in translation-update-upstream,
  as it does not support complex meson.build expressions
  (bsc#1087076#c21).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.4.4:
  + Fix memory leaks.
  + Fix behaviour of JsonParser with immutable nodes for empty
    documents.
  + Clarify documentation.
  + Update autoptr macro for JsonNode to use json_node_unref().
  + Update the enumeration types template.
  + Perform fuzzy comparisons for floating point values in the test
    suite.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
</package>
<package pkgid="96282557b44bebc7f9cc233b625e611a7b85386a081f9276ff04b7f5f64bf94c" name="libkcapi-tools" arch="x86_64">
  <version epoch="0" ver="0.13.0" rel="1.114"/>
  <changelog author="abergmann@suse.com" date="1482408000">- Initial release 0.13.0.
  A library and tools to access the kernel crypto api.
  FATE#323554 bsc#1045948</changelog>
  <changelog author="jengelh@inai.de" date="1498651200">- Compact descriptions a bit
- Remove libkcapi provide/requires
- Use %_libdir throughout and avoid /lib</changelog>
  <changelog author="meissner@suse.com" date="1498737600">- libkcapi-use-external-fipshmac.patch: use external fipshmac,
  our chroots / vm builds do not necessarily have the right kernel.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499515200">- Add reproduciblesort.patch to always link .o files in the same order and
- Add reproducibledate.patch to not add current time to man-pages to fix build-compare</changelog>
  <changelog author="meissner@suse.com" date="1499860800">- Change the signing to use openssl sha256/sha512 directly, to
  avoid fipscheck / hmaccalc.</changelog>
</package>
<package pkgid="008229e869e8c798aef23f36c42ff790a8cc6018462c4b91a376432c59f9031a" name="libkeyutils1" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="5.6.1"/>
  <changelog author="meissner@suse.com" date="1509969600">- add keyutils-devel for baselibs, to allow biarch LTP builds.
  (bsc#1061591)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="meissner@suse.com" date="1540814400">- updated to 1.5.11 (bsc#1113013)
  - Add keyring restriction support.
  - Add KDF support to the Diffie-Helman function.
  - DNS: Add support for AFS config files and SRV records</changelog>
  <changelog author="astieger@suse.com" date="1540814401">- add upstream signing key and verify source signature</changelog>
  <changelog author="dimstar@opensuse.org" date="1551700800">- Replace krb5-devel BuildRequires with pkgconfig(krb5): Allow OBS
  to shortcut the ring0 bootstrap cycle by also using krb5-mini.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1561982400">- updated to 1.6
  - Apply various specfile cleanups from Fedora.
  - request-key: Provide a command line option to suppress helper execution.
  - request-key: Find least-wildcard match rather than first match.
  - Remove the dependency on MIT Kerberos.
  - Fix some error messages
  - keyctl_dh_compute.3: Suggest /proc/crypto for list of available hashes.
  - Fix doc and comment typos.
  - Add public key ops for encrypt, decrypt, sign and verify (needs linux-4.20).
  - Add pkg-config support for finding libkeyutils.
- upstream isn't offering PGP signatures for the source tarballs anymore</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 1.6.3:
  * Revert the change notifications that were using /dev/watch_queue.
  * Apply the change notifications that use pipe2(O_NOTIFICATION_PIPE).
  * Allow "keyctl supports" to retrieve raw capability data.
  * Allow "keyctl id" to turn a symbolic key ID into a numeric ID.
  * Allow "keyctl new_session" to name the keyring.
  * Allow "keyctl add/padd/etc." to take hex-encoded data.
  * Add "keyctl watch*" to expose kernel change notifications on keys.
  * Add caps for namespacing and notifications.
  * Set a default TTL on keys that upcall for name resolution.
  * Explicitly clear memory after it's held sensitive information.
  * Various manual page fixes.
  * Fix C++-related errors.
  * Add support for keyctl_move().
  * Add support for keyctl_capabilities().
  * Make key=val list optional for various public-key ops.
  * Fix system call signature for KEYCTL_PKEY_QUERY.
  * Fix 'keyctl pkey_query' argument passing.
  * Use keyctl_read_alloc() in dump_key_tree_aux().
  * Various manual page fixes.
- spec-cleaner run (fixup failing homepage url)</changelog>
  <changelog author="meissner@suse.com" date="1609934400">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
  <changelog author="aplanas@suse.com" date="1624536000">- Add /etc/keys/ and /usr/etc/keys/ directory (bsc#1187654)</changelog>
</package>
<package pkgid="5694988a5dfe112903ee7fb058bae1aa20ebb7fd58b9e3a003e4f7ed79e4cc3d" name="libkmod2" arch="x86_64">
  <version epoch="0" ver="29" rel="4.15.1"/>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
</package>
<package pkgid="96a0418d0232e8ce4ebc57e0ee66f434c563becbfaa065fec82e7eb6bfaa5c47" name="libksba8" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="2.14"/>
  <changelog author="coolo@suse.com" date="1321704000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1349092800">- update to libksba 1.3.0
  - change license from GPLv2 to LGPLv3/GPLv2
  - minor bug fixes
- implement shared library packaging policy
- remove nld-build.diff which was added 2004 before package was in
  the openSUSE OBS, was never used or applied cleanly since r1</changelog>
  <changelog author="meissner@suse.com" date="1354017600">- Use URL for source</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411300800">- libksba 1.3.1:
  * Fixed memory leak in CRL parsing
  * Build fixes for ppc64el</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1417003200">- libksba 1.3.2 [boo#907074] [CVE-2014-9087]
  This version contains a security update which fixes a buffer
  overflow in OID to string conversion code that can be triggered
  by a specially crafted S/MIME message or ECC based OpenPGP data.
  Users of GnuPG 2.x should install this version and restart the
  dirmgr process.
  * Fixed a buffer overflow in ksba_oid_to_str.
- verify source signature</changelog>
  <changelog author="astieger@suse.com" date="1426766400">- remove libtool requirement</changelog>
  <changelog author="astieger@suse.com" date="1428667200">- libksba 1.3.3:
  * Fixed an integer overflow in the DN decoder.
  * Now returns an error instead of terminating the process for
  certain bad BER encodings.
  * Improved the parsing of utf-8 strings in DNs.
  * Allow building with newer versions of Bison.</changelog>
  <changelog author="astieger@suse.com" date="1462881600">- libksba 1.3.4:
  * Fixed two OOB read access bugs which could be used to force a DoS.
  boo#979261 CVE-2016-4574, CVE-2016-4579
  * Fixed a crash due to faulty curve OID lookup code.
  * Synced the list of supported curves with those of Libgcrypt.
  * New configure option --enable-build-timestamp; a build timestamp is
  not anymore used by default.</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- libksba 1.3.5:
  * Limit the allowed size of complex ASN.1 objects (e.g.
  certificates) to 16MiB.
  * Avoid read access to unitialized memory.
  * Improve detection of invalid RDNs.
  * Encode the OCSP nonce value as an octet string as described by
  RFC-6960.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="2d11bb7f16a45b3e955d7f33b933ba4c0fc509ac997a45a59ac92440757d1ede" name="liblcms2-2" arch="x86_64">
  <version epoch="0" ver="2.9" rel="3.3.1"/>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511870400">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
</package>
<package pkgid="62e5e1ed28d78e8c729cef8865930673fbef815ce50edc9b6e52f19bb78296ff" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="9.64.1"/>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
</package>
<package pkgid="e5384db0778458c7f9e1fd4a8ba3bf9a655b04d04d3bfbba7cbd95ecfcc9552b" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="9.64.1"/>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
</package>
<package pkgid="d48fec0d6406be9560f0c70379c374b796b0053cde04777b74d68a9cb0b1e244" name="libldb2" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="150300.3.10.1"/>
  <changelog author="david.mulder@suse.com" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="nopower@suse.com" date="1583496000">- Release ldb 2.1.1
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches; (bso#14270).</changelog>
  <changelog author="nopower@suse.com" date="1588075200">- Release ldb 2.1.2
  + CVE-2020-10700: ldb: Always use ldb_next_request() in
    ASQ module; ;(bso#14331); (bsc#1169850).</changelog>
  <changelog author="david.mulder@suse.com" date="1589976000">ldb: Bump version to 2.1.3; (bso#14330)</changelog>
  <changelog author="nopower@suse.com" date="1593777600">- Release ldb 2.1.4
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when
    ASQ and VLV combined; (bso#14364); (bsc#1173159)</changelog>
  <changelog author="ddiss@suse.com" date="1599825600">- Release ldb 2.2.0
  + Fix memory leak in ldb_kv_index_dn_ordered(); (bso#14299)
  + Fix off-by-one increment in lldb_add_msg_attr; (bso#14413)</changelog>
  <changelog author="scabrero@suse.de" date="1616587200">- Release ldb 2.2.1
  + CVE-2020-27840: Unauthenticated remote heap corruption via bad DNs;
    (bso#14595); (bsc#1183572);
  + CVE-2021-20277: out of bounds read in ldb_handler_fold; (bso#14655);
    (bsc#1183574);</changelog>
  <changelog author="nopower@suse.com" date="1636027200">- Add ldb-cve-2020-25718.patch &amp;
  CVE-2020-25718-lib-Add-hex_byte-to-replace.h.patch to backport all
  changes from ldb-2.4.1.
  + CVE-2020-25718: samba: An RODC can issue (forge) administrator
    tickets to other servers; (bsc#1192246); (bso#14558)
  + CVE-2021-3738: samba: crash in dsdb stack;
    (bsc#1192215);(bso#14848)
-  Release ldb 2.2.2
  + Corrected python behaviour for 'in' for LDAP attributes
  contained as part of ldb.Message;(bso#14845).
  + Fix memory handling in ldb.msg_diff
  Corrected python docstrings;(bso#14836)
  + Backport bronze bit fixes, tests, and selftest improvements;
  (bso#14881).</changelog>
  <changelog author="nopower@suse.com" date="1641297600">- Update to version 2.4.1; (jsc#SLE-23329);
  - Release 2.4.1
    + Corrected python behaviour for 'in' for LDAP attributes
    contained as part of ldb.Message; (bso#14845);
    + Fix memory handling in ldb.msg_diff; (bso#14836);
    + Corrected python docstrings
  - Release 2.4.0
    + Improve calculate_popt_array_length()
    + Use C99 initializers for builtin_popt_options[]
    + pyldb: Fix Message.items() for a message containing elements
    + pyldb: Add test for Message.items()
    + tests: Use ldbsearch '--scope instead of '-s'
    + pyldb: fix a typo
    + Change page size of guidindexpackv1.ldb
    + Use a 1MiB lmdb so the test also passes on aarch64 CentOS stream
    + attrib_handler casefold: simplify space dropping
    + fix ldb_comparison_fold off-by-one overrun
    + CVE-2020-27840: pytests: move Dn.validate test to ldb
    + CVE-2020-27840 ldb_dn: avoid head corruption in ldb_dn_explode
    + CVE-2021-20277 ldb/attrib_handlers casefold: stay in bounds
    + CVE-2021-20277 ldb tests: ldb_match tests with extra spaces
    + improve comments for ldb_module_connect_backend()
    + test/ldb_tdb: correct introductory comments
    + ldb.h: remove undefined async_ctx function signatures
    + correct comments in attrib_handers val_to_int64
    + dn tests use cmocka print functions
    + ldb_match: remove redundant check
    + add tests for ldb_wildcard_compare
    + ldb_match: trailing chunk must match end of string
    + pyldb: catch potential overflow error in py_timestring
    + ldb: remove some 'if PY3's in tests
    + Add missing break in switch statement
- Drop obsolete patch CVE-2020-25718-lib-Add-hex_byte-to-replace.h.patch
- Drop obsolete patch ldb-cve-2020-25718.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Modify packaging to allow parallel installation with libldb1
  (bsc#1192684):
  + Private libraries are installed in %{_libdir}/ldb2/
  + Modules are installed in %{_libdir}/ldb2/modules</changelog>
</package>
<package pkgid="4932c45e4e47135dc8625cce3b5fa16453f92304ab7ad4f77542eec8bbe41ab4" name="liblldp_clif1" arch="x86_64">
  <version epoch="0" ver="1.1+44.0f781b4162d3" rel="3.3.1"/>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
</package>
<package pkgid="ca4157dd4ca9521fcdb8aa9ab28de3a823e23a5f6e6b50ee2c250a1a80a7b5bc" name="liblmdb-0_9_17" arch="x86_64">
  <version epoch="0" ver="0.9.17" rel="4.6.2"/>
  <changelog author="crrodriguez@opensuse.org" date="1410350400">- automake.diff changes:
  * for autoconf tests to have effect, (like those in
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch) config.h must be
  included as first file in all C code.
  * in 32 bit systems, ensure we support large databases.
  * Switch the compiler to the current C standard, currently -std=gnu99
  in upcoming autoconf versions it is C11 though.
- liblmdb-implicit-decl.patch atol() requires stdlib.h
- Enable verbose build, rpmlint depends on that to work.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="varkoly@suse.com" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576152000">- Fix assert in mdb_page_search_root (bsc#1159086).
  * Add 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch</changelog>
</package>
<package pkgid="4256369b83d018387bc7a014eed3b943376f9fc3324d757cb3db80b6b13500d2" name="libltdl7" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="3.4.1"/>
  <changelog author="foss@grueninger.de" date="1417262400">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="5f70afff969ae9d34982bf920c536d8b586a7d1b96f89708a60e4b4d2d018354" name="liblttng-ust0" arch="x86_64">
  <version epoch="0" ver="2.12.0" rel="1.30"/>
  <changelog author="sor.alexei@meowr.ru" date="1497268800">- Update to version 2.9.0 (changes since 2.7.1):
  * Remove assertions in lttng-ust-comm init.
  * Add tracepoint_disable_destructors().
  * Fix manpage typo.
  * Move lttng_context_is_app to core file.
  * Move dummy functions to a common file.
  * Handle backward probe compatibility for application contexts.
  * Fix application context header size.
  * Event ctx get size should be after chan ctx.
  * Clarify and simplify the Java agent "Hello" examples.
  * Export the stream instance ID.
  * Generate and export the sequence number.
  * Add stream instance id to the packet header.
  * configure.ac: Print an empty line after AC_OUTPUT.
  * configure.ac: Macros with no arguments do not need ().
  * configure.ac: Standardise indentation to tabs.
  * configure.ac: Move AC_PROG_SED() close to other AC_PROG_*().
  * configure.ac: Test -a -&gt; shell's &amp;&amp; (more portable).
  * configure.ac: Use test "x$var" = "xyes".
  * configure.ac: AM_CONDITIONAL() accepts two arguments.
  * configure.ac: Use dnl at appropriate places.
  * configure.ac: if -&gt; AS_IF().
  * configure.ac: case -&gt; AS_CASE().
  * configure.ac: Add missing quotes in macro calls.
  * configure.ac: Use macros for version name and description.
  * configure.ac: Do not use shell eval for known values.
  * Add CONTRIBUTING.md.
  * Output "(null)" when ctf_string()'s arg is NULL.
  * Disable use of __builtin_return_address(0) on 32-bit PowerPC.
  * Fix java agent 32-bit pointer to jlong warning.
  * Use Java 6 syntax in JUL examples.
  * Add missing example file to dist tarball.
  * Add missing header to dist tarball.
  * Add missing LttngContextApi.java to dist tarball.
  * Pass the Java application context information using two
    separate arrays.
  * Correctly report filter notifications on Java agent teardown.
  * Add some logging to the AbstractLttngAgent.
  * Clear tracked application contexts upon closing a Java agent.
  * Introduce a verbose mode for the Java agent.
  * Implement Java agent application context retrieval.
  * Turn ISessiondCommand into an abstract class.
  * Split the JNI APIs in separate classes.
  * Add application context support to ust-ctl protocol.
  * Handle application context cmd.
  * Implement dynamic types, and application context provider
    support.
  * Handle negative range for LTTNG_UST_REGISTER_TIMEOUT.
  * nsure the Java JUL messages are correctly formatted.
  * Fix double-free on error sending fields.
  * Add CTF enum type support to tracepoint event.
  * Fix a missing _GNU_SOURCE define.
  * python-lttngust/setup.py.in: Update setup() fields.
  * Refactor Python agent build and install.
  * Remove debugging print() call from Python agent.
  * Python agent: Support Agent protocol v2.0.
  * Fix Java agent protocol network endianness inconsistency.
  * examples jul: Add missing files to make dist
  * Fix Filer -&gt; Filter typo in an example.
  * Fix: Return the correct list of available Java events.
  * Add a toString() to Java agent's EventRule.
  * Add API stubs for the Java context info retrievers.
  * Receive the event filter string in the Java agent.
  * Document the Java filter notification model.
  * Add filter change notification mechanism to the Java agent.
  * Manage complete "event rules" in the Java agent.
  * Introduce a new client listener interface for the Java agent.
  * Turn ILttngAgentResponse into an abstract class.
  * Clean-up: remove extraneous "found" parameters in ust-elf.
  * Fix: potential leaks in error paths.
  * Fix: double free in liblttng-ust-dl.
  * Fix: make check in OOT build with absolute path.
  * Fix: elf: leaks on error paths.
  * Cleanup: coding style.
  * Cleanup: elf: use off_t for offsets, size_t for len.
  * Cleanup: eliminate implicit sign-extension.
  * Fix: elf: NULL pointer dereference.
  * Fix: add missing ust-elf.h header to dist.
  * Fix: make check in out of tree build.
  * Fix: old gcc warnings.
  * Fix: remove stale lttng-ust-elf.h from makefile.
  * Fix: elf: uninitialised ret.
  * Fix: test elf: handle NULL debug file.
  * test: elf move constants to top of implementation.
  * Fix: elf test prog arg checking.
  * baddr statedump: remove dependency on file streams.
  * baddr statedump: hold ust lock around allocations.
  * Add unit tests for lttng_ust_elf.
  * Add memory size, build id, and debug link info to statedump and
    dl.
  * Fix: Send the correct Java agent return code when disabling
    events.
  * Fix: Correctly handle the command to disable all events.
  * Small refactor of the Java agent's TCP client.
  * Rename Java Agent event names to "event".
  * Allow compiling the Java agent with Java 1.6.
  * Restore concurrent build when Java agent is enabled.
  * Refactor Java agent to let applications manage the log
    handlers.
  * Cleanup: Add Javadoc to all public methods and members.
  * Fix: Small fixes to the Java agent example files.
  * Update doc/java-agent.txt to reflect the new packaging.
  * Split Java agent library in 3 separate jars.
  * Remove deprecated org.lttng.ust.jul.LTTngAgent class.
  * Use tar-ustar format for the dist archive.
  * Fix: cmake example with configure based oot build.
  * Fix: perform statedump before replying to sessiond.
  * build: check for CXX_WORKS for cmake example.
  * Implement liblttng-ust-fd.
  * Introduce file descriptor tracker.
  * Fix: honor send timeout on unix socket connect.
  * Fix: perform TLS fixup in all UST entry points from each
    thread.
  * Fix: build: pass configure flags to cmake example.
  * Performance: implement lttng_inline_memcpy.
  * Performance: mark ring buffer do_copy callers always inline.
  * Performance: cache the backend pages pointer in context.
  * Add ctx_len field to ring buffer context.
  * ring buffer: handle shmp errors.
  * Cleanup: libringbuffer: remove duplicate shmp() invocations in
    slow paths.
  * Performance: Only dereference shmp once.
  * Performance: Mark channel and buffer event disabled check
    unlikely.
  * Performance: Relax atomicity constraints for crash handling.
  * Fix: compat: -ust suffix sprintf error handling.
  * Performance: disable event counting by default.
  * Fix: remove unlock in getcpu.
  * Performance: remove rcu read lock from ring buffer get/put cpu.
  * Performance: define _LGPL_SOURCE in LGPL c files.
  * Performance: split check deliver fast/slow paths.
  * Fix: perf counters build against kernel headers &lt; 3.12.
  * Fix: perf counter context deadlock.
  * Fix: many-events registration/unregistration speed.
  * Fix: pre-fault TLS in ust-malloc instrumentation.
  * Fix: ust-ctl: use LTTNG_UST_HAVE_PERF_EVENT to report perf
    counter availability.
  * Fix: reset vtid cache before releasing urcu locks.
  * Fix: cleanup local_apps.allowed flag on lib cleanup.
  * Fix: Correctly handle invalid agent port file.
  * Fix: memory corruption in compat.h.
  * Introduce lttng_ust_loaded weak symbol.
  * Fix: remove invalid free.
  * Use AC_PROG_MKDIR_P (generic mkdir -p).
  * Split CMake example build steps on different lines.
  * Fix: CMake example: specify source/built includes/libs.
  * configure: allow building perf support across all
    architectures.
  * Fix: use-after-free in statedump lib iter_end.
  * Add generic fallback for perf counter read.
  * Fix: perf counters: sign-extend pmc register.
  * doc: Add flags for JUL and python agent compiling.
  * tests/hello.cxx: add ctf_enum_auto() entries.
  * Add ctf_enum_auto() for autoincrementing enumeration values.
  * Add missing ust_lib.c and ust_lib.h.
  * dl instrumentation: add dlmopen event, trace dlopen flags.
  * Add library load/unload tracking events.
  * Communication protocol: use fixed-size integer rather than
    enum.
  * Add ustctl command to regenerate the statedump.
  * Implement statedump command in UST.
  * tests/hello.cxx: add enumeration field.
  * Fix: ctf_enum_value() does not work with g++.
  * Fix: lttng context perf: missing stdbool.h header include.
  * Add perf context support for ARMv7.
  * Keep perf context FD open for other architectures.
  * Doc: cmake example: fix coding style.
  * Doc: ship cmake example with "make distcheck".
  * Doc: add CMake example.
  * configure.ac: check cmake availability.
  * Only build python lib when agent is enabled.
  * doc: information has no plural.
  * Fix: allow non-LGPL modules to use tracepoints.
  * Add -ust to the name of UST threads of the application.
  * Comment the locking mechanisms in ContextInfoManager.
  * Fix: Null-check return value of
    log4j.Category.getAllAppenders().
  * Add liblttng-ust-agent.jar to the .gitignore.
  * Fix: Specify encoding when reading agent port file.
  * Fix: Include child loggers in the output of "lttng list".
  * Fix: Handle both agent config files pointing to same port.
  * Suppress static method warning.
  * Add more logging to the LttngTcpSessiondClient.
  * Use config.h to detect sched_getcpu support.
  * Fix: use limits.h in ust-elf test.
  * Fix: strerror_r behaviour is glibc specific.
  * Add support for musl libc to ust-dlfcn.h.
  * Fix: don't generate 0-len array in tracepoint probes.
  * Fix: log4j example: set logger level to prevent unexpected
    level inheritance.
  * Fix: no LGPL define for malloc and pthread wrappers.
  * Fix: all lttng-ust source files should be tagged _LGPL_SOURCE.
  * Fix: initialise RCU callbacks with mixed LGPL/non-LGPL objects.
  * Fix: incorrect structure layout with mixed LGPL/non-LGPL
    objects.
  * Fix: don't call __builtin_return_address(0) on 32-bit powerpc.
  * Update version name TBD.
  * Fix: tracepoint header: declare tracepoint_dlopen_ptr.
  * Fix: update debug message about weak-hidden symbols.
  * Fix: tracepoint-rcu header: use tracepoint_dlopen_ptr.
  * Fix: test: relax requirement on weak-hidden symbol address.
  * Fix: work-around gcc optimisation oddness on 32-bit powerpc.
  * Fix: test weak-hidden symbols.
  * Print DBG() message about compiler weak hidden symbol
    behaviour.
  * test: add test for gcc issue with weak hidden symbol on
    powerpc.
  * Restrict Java context retriever names to a set of valid
    characters.
  * Fix: Correctly compute Java agent list loggers response size.
  * Add support for aarch64_be.
  * Fix: Fix synchronization of LTTngAgent#dispose.
  * Fix: Verify number of bytes contained in sessiond agent
    commands.
  * Fix: Avoid potential null dereference with log4j loggers.
  * Specify UTF-8 encoding for all Java agent commands.
  * Fix: merge tap tests stdout and stderr.
  * Documentation: ring buffer: SWITCH_FLUSH can be used when
    active.
  * Fix: unchecked return value in trace_clock_read64_monotonic.
  * Fix: portability: no arith on void pointer.
  * Fix: initialize build id and debug link flags to 0.
  * Tests: Add tap-driver.sh for automake &lt; 1.12.
  * Fix: add "has_build_id" and "has_debug_link" fields to
    debuginfo events.
  * Tests: Replace prove by autotools tap runner.
  * bootstrap: Standardise on autoreconf -vi.
  * Harmonize bootstrap script across projects.
  * lttng-ust(3): order environment variables.
  * lttng-ust(3): fix syntax of env. variables section.
  * lttng-ust(3): document $LTTNG_HOME.
  * Fix: Java agent should use LTTNG_HOME.
  * Fix: examples make distcheck failure.
  * Cleanup: add static for internal symbols.
  * Cleanup: Remove unused max() macros from
    ring_buffer_frontend.c.
  * Use min_t/max_t macros in lttng-ust-elf.c.
  * Tests: update ust-elf tests to reflect correct memsz
    computation.
  * Fix: erroneous computation of ELF in-memory size.
  * Make code and man pages share the same default values.
  * Fix: remove NULL check of nonnull parameter in dlclose.
  * Tracepoint array/sequence: add nowrite hex macros.
  * Tracepoint: add ctf array for network byte order integers.
  * Tracepoint: add ctf sequence for network byte order integers.
  * Fix: endianness of integers received by filter.
  * Doc: Update README.md.
  * Fix: jul and log4j agents makefile missing line and
    indentation.
  * Fix: re-introduce exported symbols.
  * Doc: update manpages for soinfo/sopath name change.
  * Rename statedump and dl events and fields.
  * Tests: list ust-elf test data explicitly in EXTRA_DIST.
  * Tests: add tests for lttng_ust_elf_is_pic.
  * Add is_pic field to statedump soinfo event.
  * Fix: add common jar to lttng-ust-agent-all dependencies.
  * Fix: add version to lttng-ust-agent-all jar file.
  * Fix: rename liblttng-ust-agent to lttng-ust-agent-all.
  * Fix: re-add liblttng-ust-agent.jar.
  * Fix: lttng java agent: dispose is non-static.
  * doc/man: do not use macros in the NAME section.
  * doc/man: remove duplicate copyrights section.
  * doc/man: lttng-ust(3): add tracing control to example.
  * doc/man: lttng-ust(3): split example files in subsections.
  * doc/man/common-copyrights: add missing THANKS section.
  * doc/man: lttng-ust(3): add missing ENVIRONMENT VARIABLES
    section.
  * README.md: bolden dependencies and update links.
  * README.md: split required and optional dependencies.
  * Convert man pages to AsciiDoc.
  * Fix: remove dead code from filter interpreter.
  * Fix: convey enum value signedness into metadata.
  * lttng-ust(3): document `lttng_ust_loaded` symbol.
  * lttng-ust(3): document `perf:thread:raw:rN:NAME` context.
  * lttng-ust-dl(3): update documentation.
  * lttng-ust(3): document liblttng-ust-fd.
  * doc/man: document the lttng_ust_lib events.
  * doc/man: add full stop to descriptive table cells.
  * doc/man: reorganise source for tables.
  * lttng-ust(3): sort ctf_*() macro parameter definitions.
  * lttng-ust(3): fix alignment and indentation.
  * lttng-ust(3): document new ctf_*() array/sequence network/hex
    macros.
  * Performance: add missing "caa_unlikely" on fast-path.
  * Fix: loglevel and model_emf_uri build fix.
  * Fix: loglevel and model_emf_uri with g++ compiled probes.
  * Fix: Out of tree build of liblttng-ust-java.
- Rename lttng-ust-docs to lttng-ust-doc and fix its RPM group.
- Remove explicit liburcu-devel requirement for the devel package:
  is autodetected already.
- Rebase lttng-ust-copying.patch.
- Remove lttng-ust-aarch64-aligned-access.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499774400">- Update to version 2.9.1:
  * lttng-ust-elf.c: Define NT_GNU_BUILD_ID if not defined.
  * Quote CMAKE variable assignment in Makefile.
  * Fix a typo in doc/examples/Makefile.am.
  * Don't override user variables within the build system.
  * Add a missing getenv.h include to ustctl.c.
  * Fix a race between lttng-ust getenv() and application setenv().
  * doc/man: Add typical `$` and `#` prompts to command lines.
  * Fix (un)install targets of Python agent.
  * Fix include config.h to resolve HAVE_DLMOPEN.
  * Validate the presence of dlmopen at configure time.
  * Fix CMake examples integration.
  * doc/examples/Makefile.am: Define C and C++ compilers for CMake.
- Replace the lttng-ust package with liblttng-ust0 and
  liblttng-ust-ctl2.
- Move lttng-gen-tp to the devel package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505476800">- Update to version 2.10.0:
  * Clean-up: Remove unused variables to silence a gcc warning.
  * Add ustctl_snapshot_sample_positions ustctl command.
  * Cleanup: Formatting in strutils_star_glob_match explanation.
  * Use SIZE_MAX instead of -1ULL for the size_t parameter.
  * filter: Use SIZE_MAX rather than UINT_MAX and tuncating -1ULL.
  * Fix: Out of bound array access in filter code.
  * Correctly clean all generated JAR files.
  * Fix: List a missing file in Java agent's Makefile.
  * Support generic globbing patterns in the Java agent.
  * Log more information in the Java TCP client.
  * Cleanup: Remove an unused import in JUL Java agent.
  * Add support for star globbing patterns in event names.
  * Filtering: Add support for star-only globbing patterns.
  * Add string utilities.
  * Filter code relicensing to the MIT licence.
  * Fix: blocking mode: Add the missing stdbool.h include.
  * Implement LTTNG_UST_BLOCKING_RETRY_TIMEOUT.
  * Introduce the LTTNG_UST_ALLOW_BLOCKING environment variable.
  * Rework the configure script.
  * Move m4 scripts to the m4 directory.
  * doc: Remove the duplicate LTTNG_UST_BLOCKING_RETRY_TIMEOUT
    man page entry.
  * lttng-ust(3): Reword and fix style of the
    LTTNG_UST_ALLOW_BLOCKING variable.
  * lttng-ust(3): Specify "If set" instead of "if set to 1" for
    some variables.
  * Fix: doc/man: Use a single XSL file and match local names.
  * Fix: Expand the shmobj size for the sequence number.
- Move manpages out of the library package to lttng-ust-doc.
- Use tarball signing.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update to version 2.10.1:
  * Fix: Specify SONAME in python-lttngust's LoadLibrary.
  * Fix: Ensure the fd tracker is initialised when called from
    constructors.
  * Fix: fd of an elf object must be registered to the fd tracker.
  * Fix: liblttng-ust-fd.so: Override the fclose symbol.
  * Fix: lttng-gen-tp: Only replace the file extension.
  * Fix: Move fsync after ftruncate.
  * Fix: Synch buffer file metadata on buffer allocation.
- Drop baselibs.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop tex/asciidoc/xmlto dependencies as the manpages are already
  generated in the tarball so we produce the same result and this
  way we are not pulling in python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1523188800">- Build the Python agent and add new subpackages: python3-lttngust
  and liblttng-ust-python-agent0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1542196800">- Update to version 2.10.2:
  * Fix: Add liblttng-ust dependency to liblttng-ust-fd.
  * Fix: Use LIBDL/LIBC_DL to select either libdl or libc.
  * Fix: AM_CONDITIONAL should be outside AS_IF block.
  * Fix: Build jni libs with openjdk &gt;= 10.
  * Fix: ustfork: Save and restore errno in syscall wrappers.
  * Fix: Cache the result of getpid() internally.
  * Fix: Reset cached vpid context on fork.
  * Fix: String comparison on incorrect length in context provider.
  * Fix: Remove for() loop initial declarations.
  * Use ust_lock during sock_info operations for atomicity against
    fork.
  * Force tracked fd to be bigger than STDERR_FILENO.
- Remove lttng-ust-copying.patch and add the licence file through
  the %license tag on the library package.</changelog>
  <changelog author="mliska@suse.cz" date="1569326400">- Update to version 2.10.5:
  * New tracef() instrumentation facility. Excerpt from
    the lttng-ust(3) man page.
  * Perf PMU counters support from user-space on x86.
  * Library base address dump is now stable
    (thanks to Mentor for their contribution).
  * fixes boo#1149704.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1582718400">- Update to version 2.11.0:
  * See /usr/share/doc/packages/lttng-ust/ChangeLog
- Add lttng-ust-2.11.0-fix-no-common.patch: Fix build with
  - fno-common (commit 21a934df, boo#1160400).
- Drop support for old openSUSE versions.</changelog>
  <changelog author="tonyj@suse.com" date="1604318400">- Update to version 2.12.0 (jsc#SLE-16189)
  Changelog: https://git.lttng.org/?p=lttng-ust.git;a=blob_plain;f=ChangeLog;hb=v2.12.0
  Delete patch: lttng-ust-2.11.0-fix-no-common.patch (upstream)
  Delete patch: lttng-ust-copying.patch</changelog>
</package>
<package pkgid="10ad6de12b5e117fc0f2d0420f53aed18b68ffcf8b26a8b356b79745d1356c74" name="liblua5_3-5" arch="x86_64">
  <version epoch="0" ver="5.3.6" rel="3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1499428800">- Add patch lua-build-system.patch for all the builsystem changes
- Drop patches merged to the above:
  * lua-5.3.3-prefix.patch
  * lua-5.3.3-shared.patch
- Drop not really needed lua-5.3.3-visible.patch
- Version update to lua 5.3.4 containing various bugfixes
- Rename to lua53</changelog>
  <changelog author="tchvatal@suse.com" date="1499688000">- Require lua macros rather than bundling them with lua itself</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Properly set includedir in the .pc file</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Add INSTALL_LMOD and INSTALL_CMOD variables to lua53.pc: this is
  queried for example by rrdtool's buildsystem.</changelog>
  <changelog author="tchvatal@suse.com" date="1500984000">- Provide symbol for pkgconfig</changelog>
  <changelog author="mcepl@suse.com" date="1552392000">- Update to 5.3.5:
  (it is really problematic to find ANY documentation of changes
  between minor versions; the best we have is
  https://www.lua.org/bugs.html)
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - Small build tweaks.</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Added upstream-bugs.patch: upstream bug patches
  * Patches 2,3,4
- Added upstream-bugs-backport-lua54.patch: bugs discovered in lua54
  * Patch 10: CVE-2020-24371, boo#1175449
  * Patch 11: CVE-2020-24370, boo#1175448
  * Patch 13
- Add RISC-V to list of 64-bit architectures</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1601035200">- Update to version 5.3.6:
  * Fixes bugs found in Lua 5.3.5 and Lua 5.4.0
  * Lua 5.3 is now EOL
- Removed upstream-bugs.patch: new release (no bugs found yet)
- Removed upstream-bugs-backport-lua54.patch: new release (no bugs found yet)</changelog>
  <changelog author="mcepl@suse.com" date="1622548800">- Sync with Factory (5.3.6), includes fixes for
  - Long brackets with a huge number of '=' overflow some
    internal buffer arithmetic.
  - bsc#1123043 CVE-2019-6706 Fix free-after-use bug in
    lua_upvaluejoin function of lapi.c
- Remove upstreamed patches:
  - CVE-2019-6706-use-after-free-lua_upvaluejoin.patch</changelog>
</package>
<package pkgid="731de67cbf9c4b6201df35cbbac1c304027553fc213a611fb8922aa051b746af" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="8.39.1"/>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
</package>
<package pkgid="4eb891b5e57fe711b6f97e9279ca5dabb035ac721473f147a5cc55116ce4eea8" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="d3fc5c0776f9576642b68e0a24bdc99a29b5caf667c482d10af478830b84207c" name="liblzma5" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="cb208c23f06fa508b8acd0274bd41dbecc6dfb9c7ca41d1f145ce29eb6fcad38" name="liblzo2-2" arch="x86_64">
  <version epoch="0" ver="2.10" rel="2.22"/>
  <changelog author="crrodriguez@opensuse.org" date="1304683200">- Update to version 2.05
  * Converted the configure system to non-recursive Automake.
  * Applied some overdue speed optimizations for modern x86/x64 architectures
  and current compilers like gcc 4.6 and MSVC 2010.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1316952000">- Update to version 2.06
  * Some minor optimizations for big-endian architectures.
  * Fixed overly strict malloc() misalignment check in examples.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328961600">- move libraries back to %{_libdir}, /usr merge project</changelog>
  <changelog author="cfarrell@suse.com" date="1346068800">- license update: GPL-2.0+
  No GPL-2.0 "only" licenses found in the package</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mrueckert@suse.de" date="1404302400">- update to 2.08 (bnc#883947) CVE-2014-4607
  - Updated the Autoconf scripts to fix some reported build
    problems.
  - Added CMake build support.
  - Fixed lzo_init() on big-endian architectures like Sparc.
- additional changes in 2.07
  * Fixed a potential integer overflow condition in the "safe"
    decompressor variants which could result in a possible buffer
    overrun when processing maliciously crafted compressed input
    data.
    Fortunately this issue only affects 32-bit systems and also can
    only happen if you use uncommonly huge buffer sizes where you
    have to decompress more than 16 MiB (&gt; 2^24 bytes) untrusted
    compressed bytes within a single function call, so the
    practical implications are limited.
    POTENTIAL SECURITY ISSUE. CVE-2014-4607.
  * Removed support for ancient configurations like 16-bit "huge"
    pointers - LZO now requires a flat 32-bit or 64-bit memory
    model.
  * Assorted cleanups.</changelog>
  <changelog author="dsterba@suse.cz" date="1406203200">- enable lzo-devel-static package build</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Update to 2.09
  * Work around gcc bug #64516 that could affect architectures like
  armv4, armv5 and sparc.</changelog>
  <changelog author="dsterba@suse.cz" date="1490788800">- Update to 2.10
  * Improve CMake build support.
  * Add support for pkg-config.
  * Do not redefine "snprintf" so that the examples build with MSVC 2015.
  * Assorted cleanups.</changelog>
  <changelog author="dimstar@opensuse.org" date="1510660800">- Add pkgconfig BuildRequires: allow the rpm dep generator to
  inspect the shipped .pc file and produce requires/provides.</changelog>
</package>
<package pkgid="fb61286d15c4a80b919e55c72eeb0941cd61626136469bb6e5ec0687ef11a448" name="libmagic1" arch="x86_64">
  <version epoch="0" ver="5.32" rel="7.14.1"/>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="werner@suse.de" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="werner@suse.de" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="schwab@suse.de" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="werner@suse.de" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
  <changelog author="werner@suse.de" date="1631016000">- Add patch bsc1189996-9fbe768a.patch to fix bsc#1189996</changelog>
</package>
<package pkgid="32df50ea974101336c5fdcd027407fc728451c684c14af21ac22396cdf2f8264" name="libmicrohttpd12" arch="x86_64">
  <version epoch="0" ver="0.9.57" rel="1.33"/>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
</package>
<package pkgid="6a0ac21afa37b1bda1fb14821c53e5fcd944199f0d71dc0fc19ae00cdb8828e5" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="9695e1bb9e98125e8f7664f140b5cdf942d4d65ea1962bb1167f6441db8fa80e" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="ba1dfdf3aae9a8e88f85c2685c2001ddc6dde4d566de805e0a0b605cc7ab8ccb" name="libmnl0" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="1.25"/>
  <changelog author="jengelh@medozas.de" date="1292587200">- Update to initial public tarball release, version 1.0.0
  * Added checking variants of the put function family.
  * Message batching infrastructure
- Run spec-beautifier on .spec file</changelog>
  <changelog author="jengelh@medozas.de" date="1293364800">- Update to libmnl 1.0.1
  * examples: fix wrong group mask number in nfct-event
  * header: fix signess issues in MNL_SOCKET_BUFFER_SIZE</changelog>
  <changelog author="jengelh@medozas.de" date="1325160000">- SPDX format for License: tag
- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325505600">- Update to new upstream release 1.0.2
  * build and compile updates
  * header: fix invalid use of type void * in arithmetic of
  mnl_for_each_nest(...)
  * doc: fix wrong comment describing mnl_nlmsg_batch_stop</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.0.3
  * Added the "mnl_attr_for_each_payload" function, which allows to
  iterate over attributes for a given payload pointer.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline, source validator already
  does that</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Move include files to /usr/include/pkg, like done in many other
  packages</changelog>
  <changelog author="jengelh@inai.de" date="1418126400">- Remove extra directory pkg, one level is enough.</changelog>
  <changelog author="jengelh@inai.de" date="1467460800">- Update to new upstream release 1.0.4
  * Improvements in the netlink message printing function,
  attribute validation for MNL_TYPE_MSEC and MNL_TYPE_U64, clang
  compilation fixes, the new mnl_socket_open2() and
  mnl_socket_fdopen() functions, missing handling for
  NLM_F_DUMP_INTR and documentation updates.</changelog>
</package>
<package pkgid="41a7e41322b2ec63d9b0779abb40a7fe13d602e3c3c24df26639abaa28a982a4" name="libmodman1" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="1.27"/>
  <changelog author="dimstar@opensuse.org" date="1276430400">- Initial package of libmodman 1.0.1, was split out of libproxy.</changelog>
  <changelog author="dimstar@opensuse.org" date="1277208000">- Initial work for mingw32 cross compilation support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1279627200">- Disable the test suite for this release. A known error with
  as-needed makes it fail. Will be fixed in next release.</changelog>
  <changelog author="dimstar@opensuse.org" date="1282219200">- Update to version 2.0.0
  - New module interface using a single structure
  - New way of loading builtin that does rely on dlopen()
  - Fixed running test with linker flag --as-needed
- Enable the test suite</changelog>
  <changelog author="dimstar@opensuse.org" date="1282219201">- Check for build_snapshot: the svn snapshot project contains
  unversioned tarballs.</changelog>
  <changelog author="vuntz@opensuse.org" date="1283428800">- Update to version 2.0.1:
  + Now builds with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1341489600">- Export CXXFLAGS="%{optflags}" in build section to be sure we get
  proper debug info.</changelog>
</package>
<package pkgid="0a3f6e143f9b7b3ab0c9aaa0bbaadd7ec737e51293c49b0de6394d8f8fddd4b1" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="89a3b949319b81eec0c9be4f5f7fde220bcd6825da78ee0d8c99498d549ab4a2" name="libmozjs-60" arch="x86_64">
  <version epoch="0" ver="60.9.0" rel="4.40"/>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 60.2.2:
  * Bug fix release.
- Drop mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch: Fixed upstream</changelog>
  <changelog author="schwab@suse.de" date="1549108800">- mozjs60-mozilla-s390-bigendian.patch: rediff and apply on more big
  endian archs
- mozjs60-xulrunner-24.0-s390-inlines.patch: remove
- Replace icudt58b.dat.xz by icudt60b.dat.xz
- riscv-support.patch: add basic support for riscv64</changelog>
  <changelog author="wr@rosenauer.org" date="1549195200">- update to ESR codebase (60.4.0)
- rebased riscv-support.patch</changelog>
  <changelog author="schwab@suse.de" date="1549886400">- riscv-support.patch: fix last change</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- No longer pass --enable-debug to configure. It is not needed for
  our endusers, and will only slow down the engine. Nor have we
  built it with debug in the past.</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Drop python-wheel BuildRequires: causes a build cycle, and is not
  needed.</changelog>
  <changelog author="mgorse@suse.com" date="1570190400">- Update to version 60.9.0
- rebased riscv-support.patch
- Remove source modifications that made some private functions
  public. Probably not needed anymore, and was introducing a
  build error
- Regenerate icudt60b.dat.xz
- Added some upstream bug fixes included in Debian and Fedora:
  Always-use-the-equivalent-year-to-determine-the-time-zone.patch
  emitter.patch
  emitter_test.patch
  init_patch.patch
  enddianness.patch
  jsproperty-endian.patch
  Save-x28-before-clobbering-it-in-the-regex-compiler.patch
  Save-and-restore-non-volatile-x28-on-ARM64-for-generated-unboxed-object-constructor.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1575979200">- Add Don-t-run-non262-extensions-clone-errors.js-on-s390x.patch,
  based on Debian patch, to enable back tests on s390x (and ppc64).
- Add tests-Expect-a-test-to-fail-on-big-endian.patch, based on
  Debian patch, accept a test failure on big-endian like s390x.
- Ensure build for x86 is with SSE2 (SSE for floating point math),*
  required by upstream (requires switching package to i686).
- enable back tests on s390x and i586
- Remove build workaround on ppc64le.
- Reorder/change build flags to follow Debian and Fedora.
- Enable back tests on all platforms (except JIT on s390).
- Ensure we don't build bundled security libs.
- Don't ship a icu bundle for big-endian, recreate it instead, with
  patches icu_sources_data-Write-command-output-to-our-stderr.patch
  and icu_sources_data.py-Decouple-from-Mozilla-build-system.patch.
- Update patch enddianness.patch with more fixes from
  bmo#1590907 to fix strings usage on s390x (bsc#1158355).
- Add Skip-some-i18n-tests-because-we-are-now-using-system-ICU.patch
  Update-to-ICU-61-Part-3-Update-tests.patch,
  Update-to-ICU-64-Part-3-Update-tests.patch,
  Update-to-ICU-65-Part-3-Update-tests.patch to allow building
  with system icu
- Add flag to switch between system icu and embedded icu and
  enable system icu.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Remove Update-to-ICU-64-Part-3-Update-tests.patch, SLE is back to
  ICU 60.x.</changelog>
  <changelog author="fcrozat@suse.com" date="1576756800">- SLE 15 SP2 will ship with ICU 65, apply patches accordingly
  (jsc#SLE-11118).</changelog>
</package>
<package pkgid="b158e59269f454bccd0dbe9e9d60770da95f9ec881922edfb237994d3121a3bf" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.8.5+82+suse.746b76e" rel="2.7.1"/>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
  <changelog author="mwilck@suse.com" date="1632225600">- Update to version 0.8.5+82+suse.746b76e:
  * libmultipath: avoid buffer size warning with systemd 240+
  (bsc#1189176)
- Add a versioned dependency of multipath-tools on libmpath0
  (bsc#1190622)</changelog>
</package>
<package pkgid="8efc310032a746dd6036f5236de964946725fca3d46534a4df19d4295ec9106e" name="libmspack0" arch="x86_64">
  <version epoch="0" ver="0.6" rel="3.14.1"/>
  <changelog author="sbrabec@suse.cz" date="1425038400">- Remove problematic libmspack-qtmd_decompress-loop.patch
  (bnc#912214#c10).
  Version 0.5 has a correct fix dated 2015-01-05.</changelog>
  <changelog author="mardnh@gmx.de" date="1516017600">- Update to version 0.6
  * read_spaninfo(): a CHM file can have no ResetTable and have a
  negative length in SpanInfo, which then feeds a negative output
  length to lzxd_init(), which then sets frame_size to a value of
  your choosing, the lower 32 bits of output length, larger than
  LZX_FRAME_SIZE. If the first LZX block is uncompressed, this
  writes data beyond the end of the window.
  This issue was raised by ClamAV as CVE-2017-6419.
  * lzxd_init(), lzxd_set_output_length(), mszipd_init(): due to the
  issue mentioned above, these functions now reject negative lengths
  * cabd_read_string(): add missing error check on result of read().
  If an mspack_system implementation returns an error, it's
  interpreted as a huge positive integer, which leads to reading
  past the end of the stack-based buffer.
  This issue was raised by ClamAV as CVE-2017-11423
- Add subpackage for helper tools
- Run spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1516104000">- Fix typo</changelog>
  <changelog author="jengelh@inai.de" date="1516104001">- Correct SRPM group.</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Correct mspack-tools group to Productivity/File utilities</changelog>
  <changelog author="mcalabkova@suse.com" date="1540555200">- Added patches:
  * libmspack-resize-buffer.patch -- CAB block input buffer is one
    byte too small for maximal Quantum block.
  * libmspack-fix-bounds-checking.patch --  Fix off-by-one bounds
    check on CHM PMGI/PMGL chunk numbers and reject empty filenames.
  * libmspack-reject-blank-filenames.patch -- Avoid returning CHM
    file entries that are "blank" because they have embedded null
    bytes.
  * (the last two patches were modified by removing unneeded part
    in order to make them more independent)
- Fixed bugs:
  * CVE-2018-18584 (bsc#1113038)
  * CVE-2018-18585 (bsc#1113039)</changelog>
  <changelog author="mcalabkova@suse.com" date="1553860800">- Enable build-time tests (bsc#1130489)
  * Added patch libmspack-failing-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add libmspack-0.6alpha-CVE-2019-1010305.patch to fix a buffer
  overflow in chmd_read_headers(): a CHM file name beginning "::"
  but shorter than 33 bytes will lead to reading past the
  freshly-allocated name buffer - checks for specific control
  filenames didn't take length into account [bsc#1141680]
  [CVE-2019-1010305]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626264000">- There is an off-by-one error in the CHM PMGI/PMGL chunk number validity
  checks, which could lead to denial of service
  (CVE-2018-14679, bsc#1103032)
  * libmspack-CVE-2018-14679.patch
- Bad KWAJ file header extensions could cause a one or two byte overwrite
  (CVE-2018-14681, bsc#1103032).
  * libmspack-CVE-2018-14681.patch
- There is an off-by-one error in the TOLOWER() macro for CHM decompression
  (CVE-2018-14682, bsc#1103032).
  * libmspack-CVE-2018-14682.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1641384000">- chmextract.c add anti "../" and leading slash protection to chmextract
  (CVE-2018-18586.patch, bsc#1113040)
  * cve-2018-18586.patch</changelog>
</package>
<package pkgid="584702e68f929239df795d01ebeb2aa16e01b6f0cf0cdd8f4154bfd771300e09" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="5.9.1"/>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
</package>
<package pkgid="93699105668e9ea61e11e70a634b7b4822761a802c483e85a6ef9b18a630e454" name="libndctl6" arch="x86_64">
  <version epoch="0" ver="71.1" rel="3.3.1"/>
  <changelog author="msuchanek@suse.de" date="1583236800">- ndctl/test: Relax dax_pmem_compat requirement (bsc#1159523)
  + ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Add -fcommon flag on Tumbleweed (boo#1160286).
- Fix 'ndctl enable-namespace all' fails trying to enable idle namespaces
  (bsc#1165509 ltc#182068).
  + ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1585915200">- ndctl/namespace: Skip zero namespaces when processing all namespaces
  (bsc#1167861, bsc#1165509, ltc#182068).
  + ndctl-namespace-skip-zero-namespaces-when-processing.patch
- Refresh patch to upstream version:
  ndctl-test-Relax-dax_pmem_compat-requirement.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1589544000">- Update to v68:
  * zero-labels: display an error if regions are active
  * destroy-namespace: fix seed namespace accounting
  * list: drop named list objects from verbose listing
  * *-namespace: emit better errors on failure
  * read-infoblock: new command to read an infoblock
  * write-infoblock: new command to create and write an infoblock
  * create-namespace: add --continue option
  * daxctl-reconfigure-device: add --no-movable option
  * daxctl-reconfigure-device: display movable state in listings
  * daxctl-reconfigure-device: detect races in memory onlining
  * security: support for 'security frozen' attribute
  * daxctl-reconfigure-device: new command for device mode management
  * daxctl-{on,off}line-memory: new commands for devices in system-ram mode
  * monitor: logging improvements, allow sending to background
  * inject-error: refuse to operate on activew BTT namespaces
  * *-labels: improvements to minimize data transfer
  * create-namespace: usability improvements around region search
- Removed ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- Removed ndctl-dimm-Fix-init-labels-success-reporting.patch
- Removed ndctl-list-Introduce-region-capability-objects.patch
- Removed ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch
- Removed ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
- Removed ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch
- Removed ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Removed ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1594728000">- Clarify documentation about filtering options (bsc#1173861)
  + ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1597060800">- Update to v69 (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484,
    jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845):
  * infoblock: Set the default alignment to the platform alignment
  * libndctl/papr_scm: Add support for reporting "life_used_percentage" metric
  * Skip region filtering if numa_node attribute is not present
  * libndctl,papr_scm: Implement support for PAPR_PDSM_HEALTH
  * miscellaneous bugfixes
- Removed ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1598616000">- Suppress ENXIO when processing all namespaces (jsc#SLE-13321, bsc#1175851, ltc#187867).
  + ndctl-namespace-Suppress-ENXIO-when-processing-all-n.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1603281600">- Update to upstream v70.1 (jsc#SLE-13338).
  Adds firmware activation support.</changelog>
  <changelog author="msuchanek@suse.de" date="1609416000">- Update to upstream v71 (jsc#SLE-14344, bsc#1170384).
  - support for the new device-dax subdivision functionality added in Linux in
    v5.10, including ways to create smaller devdax devices using
    daxctl/libdaxctl, as well as creating, listing, and restoring from a config
    dump, 'mappings' on these devices.
  - miscellaneous bugfixes
- Fix documentation and license packaging</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 71.1:
  * ndctl/dimm: Attempt an abort upon firmware-update-busy status
  * ndctl/dimm: Fix submit_abort_firmware()</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build (bsc#1188502).</changelog>
</package>
<package pkgid="bc09a9bc3f2c41caacab8e095ce2d3a4297a94c3b307970a88264d2d968b547c" name="libnetcontrol0" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="10.5.1"/>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
</package>
<package pkgid="b9b1e2503ba60c23565900223e3cfcd8aa64472c67dd30bd48bdb68cef4d7aca" name="libnetfilter_conntrack3" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="1.38"/>
  <changelog author="jengelh@inai.de" date="1337428800">- Update to new upstream release 1.0.1
  * add NAT, expectfn and class support
  * conntrack: add new ATTR_GRP_[ORIG|REPL]_ADDR_[SRC|DST] attributes</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.2
  * This release provides new interfaces to interact with libmnl,
  and also has several fixes.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.0.3
  * Treat the ATTR_HELPER_INFO attribute as the variable-length type
  that it actually is.
  * Fix a use after free when nfct_clone was used with certain
  attribute data types.</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.0.4
  * This release includes connlabel support, one memleak fix and
  fixes in the comparison API.</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.0.5
  * conntrack: add mark event filter
  * conntrack: compare: relax MARK/ZONE attribute comparison</changelog>
  <changelog author="jengelh@inai.de" date="1471867200">- Update to new upstream release 1.0.6
  * add support for IPv6 NAT
  * conntrack: add zone attribute to tuple</changelog>
  <changelog author="jengelh@inai.de" date="1525176000">- Update to new upstream release 1.0.7
  * new synproxy support
  * don't crash on NULL labelmap
  * expose a copy of nf_conntrack_common.h</changelog>
</package>
<package pkgid="18cf07b0e7bd3e135bdd9161786f2c4a97a61338cfc6c85e99c34144cf7353d7" name="libnetfilter_cthelper0" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="1.21"/>
  <changelog author="jengelh@inai.de" date="1338811200">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Rectify baselibs.conf to include the right package name</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to initial official release 1.0.0
  * This library provides the infrastructure for the user-space
  helper infrastructure available since the Linux kernel 3.6.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="cshorler@googlemail.com" date="1417953600">- Add fix_h_expect_policy_free.patch to fix crash due to following
  a just-freed pointer [bnc#908875]</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Remove version from subinclude directory; it tends to break
  recompiles of third software after a library update.</changelog>
</package>
<package pkgid="f0d9d98e2dd9f184671df9cd248b747db4924c4237039a9e1edaecd20a195c29" name="libnetfilter_cttimeout1" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="1.22"/>
  <changelog author="jengelh@medozas.de" date="1330516800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Update to first official tarball release 1.0.0
  * Add ICMPv6 support
  * add new parameter type to nfct_timeout_snprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
</package>
<package pkgid="57e909dfcde4ceb1e5bc723225ce2b244cd99b99f5020efaf60c22b3d09094e9" name="libnettle6" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="4.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="asn@cryptomilk.org" date="1504440000">- Build nettle with AES-NI support (bsc#1056980)</changelog>
  <changelog author="asn@cryptomilk.org" date="1504526400">- Add patch to fix build of fat-arm:
  * nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="astieger@suse.com" date="1511092800">- libnettle 3.4:
  * Fixed an improper use of GMP mpn_mul, breaking curve2559 and
    eddsa on certain platforms
  * Fixed memory leak when handling invalid signatures in
    ecdsa_verify. Fix contributed by Nikos Mavrogiannopoulos.
  * Reorganized the way certain data items are made available:
    Nettle header files now define the symbols
    nettle_hashes, nettle_ciphers, and nettle_aeads, as
    preprocessor macros invoking a corresponding accessor
    function. For backwards ABI compatibility, the symbols are
    still present in the compiled libraries, and with the same
    sizes as in nettle-3.3.
  * Support for RSA-PSS signatures
  * Support for the HKDF key derivation function, defined by RFC
    5869
  * Support for the Cipher Feedback Mode (CFB)
  * New accessor functions: nettle_get_hashes,
    nettle_get_ciphers, nettle_get_aeads, nettle_get_secp_192r1,
    nettle_get_secp_224r1, nettle_get_secp_256r1,
    nettle_get_secp_384r1, nettle_get_secp_521r1.
    Direct access to data items is deprecated going forward.
  * The base16 and base64 functions now use the type char * for
    ascii data, rather than uint8_t *. This eliminates the last
    pointer-signedness warnings when building Nettle
  * The contents of the header file nettle/version.h is now
    architecture independent, except in --enable-mini-gmp
  * Prevent data sizes from leaking into the ABI
- Fixes previously carried as patches:
  * Fix compilation error with --enable-fat om ARM
    Drop nettle-3.3-fix-fat-arm.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1544788800">- Security fix: [bsc#1118086, CVE-2018-16869]
  * Leaky data conversion exposing a manager oracle
  * Added libnettle-CVE-2018-16869-3.4.patch</changelog>
  <changelog author="jsikes@suse.de" date="1552824000">- Update to 3.4.1 - FATE#327114 (bsc#1129598)
  * Fix CVE-2018-16869 (bsc#1118086)
    libnettle-CVE-2018-16869-3.4.patch (removed)
    All functions using RSA private keys are now side-channel
    silent, meaning that they try hard to avoid any branches or
    memory accesses depending on secret data. This applies both to
    the bignum calculations, which now use GMP's mpn_sec_* family
    of functions, and the processing of PKCS#1 padding needed for
    RSA decryption.
  * Changes in behavior:
    The functions rsa_decrypt and rsa_decrypt_tr may now clobber
    all of the provided message buffer, independent of the
    actual message length. They are side-channel silent, in that
    branches and memory accesses don't depend on the validity or
    length of the message. Side-channel leakage from the
    caller's use of length and return value may still provide an
    oracle useable for a Bleichenbacher-style chosen ciphertext
    attack. Which is why the new function rsa_sec_decrypt is
    recommended.
  * New features:
    A new function rsa_sec_decrypt.
  * Bug fixes:
  - Fix bug in pkcs1-conv, missing break statements in the
    parsing of PEM input files.
  - Fix link error on the pss-mgf1-test test, affecting builds
    without public key support.</changelog>
  <changelog author="vcizek@suse.com" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="pmonreal@suse.com" date="1618833600">- Security fix: [bsc#1184401, CVE-2021-20305]
  * multiply function being called with out-of-range scalars
  * Affects ecc-ecdsa-sign(), ecc_ecdsa_verify() and _eddsa_hash().
- Add libnettle-CVE-2021-20305.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1623326400">- Security fix: [CVE-2021-3580, bsc#1187060]
  * Remote crash in RSA decryption via manipulated ciphertext
- Add patches:
  * libnettle-CVE-2021-3580-rsa_sec.patch
  * libnettle-CVE-2021-3580-rsa_decrypt.patch</changelog>
</package>
<package pkgid="95d818a27363e5aa606d6e646935bfde9754b29ed13d0c243e479ace0f870422" name="libnfnetlink0" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="2.11"/>
  <changelog author="jengelh@medozas.de" date="1321963200">- Make License field SPDX compliant (bnc#731935)</changelog>
  <changelog author="jengelh@medozas.de" date="1325160000">- Use separate include dir to detect compile errors</changelog>
  <changelog author="jengelh@medozas.de" date="1325332800">- Update to new git snapshot 1.0.0+git28
  * build updates, license update</changelog>
  <changelog author="cfarrell@suse.com" date="1328875200">- license update: GPL-2.0
  Look at e.g. src/iftable.c - please check if GPL-3.0 applications require
  this library</changelog>
  <changelog author="jengelh@inai.de" date="1346414400">- Update to new git snapshot 1.0.0+git35
  * Fix incomplete retrieval of the interface list,
  which causes conntrackd to not operate as desired
  (http://marc.info/?l=netfilter&amp;m=134458290414850&amp;w=2 )</changelog>
  <changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.0.1
  (no changes over 1.0.0+git35, this is just the official release)</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature</changelog>
  <changelog author="dmueller@suse.com" date="1398340800">- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway)</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Drop %version from subincludedir, it tends to break recompiles of
  already-built trees on library updates.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="29fe9350cb31daf005901f402c6f3e6fdc7289ad3d9364c2d8e52e9ba8b113e6" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="1.7"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
</package>
<package pkgid="ec1a16b409bd7d48d91e3fd19d9a9aab341e372e8624fe72317d2c2c1269b9a1" name="libnftnl11" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 1.1.0
  * Add new API infrastructure to support "flow tables".</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 1.1.1
  * expr: add map lookups for numgen and hash statements
  * rule: add nftnl_rule_list_insert_at()
  * expr: add connlimit support
  * expr: extend fwd to support address and protocol</changelog>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.1.2
  * This release adds supports for new kernel extensions: tproxy,
    tunneling, xfrm, osf, conntrack timeouts and helpers. This
    release deprecates the nftnl_rule_cmp() interface and the low
    level JSON infrastructure.
- Remove bufferov.diff (obsolete)</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.1.3
  * expr: osf: add version option support
  * udata: add NFTNL_UDATA_* definitions
  * chain: support per chain rules listing</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 1.1.4
  * Add ct id support, add ct expectation support,
    add synproxy support.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.1.5
  * flowtable: add support for handle attribute
  * obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data()</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 1.1.6
  * add slave device matching
  * support for NFTNL_SET_EXPR</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Update to release 1.1.7
  * udata: add NFTNL_UDATA_SET_DATA_INTERVAL</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 1.1.8
  * libnftnl: export nftnl_set_elem_fprintf
  * examples: add support for NF_PROTO_INET family
  * table: add userdata support
  * object: add userdata and comment support
  * chain: add userdata and comment support
  * src: add support for chain ID attribute</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.1.9
  * Improve formatting of registers in bitwise dumps.</changelog>
</package>
<package pkgid="a763c3ad6b01b86ce376a13a50c6844653e0d0ddb3643a21e38b9d377a76b415" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="65c406bfb3a43640a74c26ae5d6d677d3017c83377424f235cdcbf9c75cb8e74" name="libnl-config" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="1.29"/>
  <changelog author="jengelh@inai.de" date="1394366400">- Update to new upstream release 3.2.24
  * Add support for: ingress qdiscs, veth links, link network
  namespaces, tc action (general), mirred tc action, u32 tc action,
  fq_codel qdisc</changelog>
  <changelog author="dmueller@suse.com" date="1398427200">- remove python-devel dependency</changelog>
  <changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 3.2.25
  * route: fix off-by-one in rtnl_act_parse()
  * act: fix policy range check
  * act: fix the logic of parsing actions
  * u32: prevent memcpy from NULL
  * attr: prevent garbage return value for NULL param
  * introduce ipip, ip6, gre, sit tunnel support
  * tc: add co_groups for tc qdisc and filter</changelog>
  <changelog author="olaf@aepfle.de" date="1412769600">- BuildRequire at least bison 2.4, version in SLE11 is too old</changelog>
  <changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 3.2.27
  * link: add ifb device support
  * qdisc: add hfsc qdisc support
  * route/act: add skbedit action
  * New sublibraries: libnl-xfrm-3.0</changelog>
  <changelog author="jengelh@inai.de" date="1470830400">- Update to new upstream release 3.2.28
  * route/link: IFLA_VLAN_PROTOCOL added to vlan_put_attrs
  * route/vrf: add VRF support
  * route/link: add macvtap support
  * sit: add 6RD support
  * lib/route: add macsec support</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 3.2.29
  * nl-addr: avoid read-out-of-bound in nl_addr_fill_sockaddr()
  * lib: add utility function nl_strerror_l()
  * lib/route: allow override of message type during link change
  * lib/route: set IFLA_PROTINFO attribute in request message
  * lib/route: Add port state translation functions
  * lib/route: Extend Bridge Flags
  * lib/route: Allow override of IFLA_AF_SPEC nesting
  * lib/route: Support IFLA_BRIDGE_MODE
  * macvlan: add support for "source" mode
  * macvlan: adjust types and merge MACVLAN_HAS_MACCOUNT and
  MACVLAN_HAS_MACDATA
  * vxlan: add support for additional VXLAN attributes
  * lib/route: SRIOV Parse, Read, Clone support
  * Add PPP support
  * route/act: add gact tc action
  * link: add support for IFLA_CARRIER_CHANGES, IFLA_PHYS_PORT_NAME,
  IFLA_PHYS_SWITCH_ID, IFLA_GSO_MAX_SEGS and IFLA_GSO_MAX_SIZE</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Add nla-reserve.diff [boo#1020123]</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 3.3.0~rc1
  * sriov: fix crash in rtnl_link_sriov_parse_vflist
  * sriov: avoid buffer overrun in rtnl_link_sriov_parse_vflist()
  * use O_CLOEXEC
  * lib/attr.c: check for valid length argument in nla_reserve()
  * route: neigh: use NDA_MASTER for neigh-&gt;n_master if available
  * xfrm: allow quering optional arguments from xfrmnl_sp_get_sec_ctx()
- Drop nla-reverse.diff (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to final release 3.3.0
  * No changes</changelog>
</package>
<package pkgid="f5d035664d3af4066fc8817ad7c75c0341314967ee8c4218ddfe86530cf8985b" name="libnl3-200" arch="x86_64">
  <version epoch="0" ver="3.3.0" rel="1.29"/>
  <changelog author="jengelh@inai.de" date="1394366400">- Update to new upstream release 3.2.24
  * Add support for: ingress qdiscs, veth links, link network
  namespaces, tc action (general), mirred tc action, u32 tc action,
  fq_codel qdisc</changelog>
  <changelog author="dmueller@suse.com" date="1398427200">- remove python-devel dependency</changelog>
  <changelog author="jengelh@inai.de" date="1405512000">- Update to new upstream release 3.2.25
  * route: fix off-by-one in rtnl_act_parse()
  * act: fix policy range check
  * act: fix the logic of parsing actions
  * u32: prevent memcpy from NULL
  * attr: prevent garbage return value for NULL param
  * introduce ipip, ip6, gre, sit tunnel support
  * tc: add co_groups for tc qdisc and filter</changelog>
  <changelog author="olaf@aepfle.de" date="1412769600">- BuildRequire at least bison 2.4, version in SLE11 is too old</changelog>
  <changelog author="jengelh@inai.de" date="1454414400">- Update to new upstream release 3.2.27
  * link: add ifb device support
  * qdisc: add hfsc qdisc support
  * route/act: add skbedit action
  * New sublibraries: libnl-xfrm-3.0</changelog>
  <changelog author="jengelh@inai.de" date="1470830400">- Update to new upstream release 3.2.28
  * route/link: IFLA_VLAN_PROTOCOL added to vlan_put_attrs
  * route/vrf: add VRF support
  * route/link: add macvtap support
  * sit: add 6RD support
  * lib/route: add macsec support</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 3.2.29
  * nl-addr: avoid read-out-of-bound in nl_addr_fill_sockaddr()
  * lib: add utility function nl_strerror_l()
  * lib/route: allow override of message type during link change
  * lib/route: set IFLA_PROTINFO attribute in request message
  * lib/route: Add port state translation functions
  * lib/route: Extend Bridge Flags
  * lib/route: Allow override of IFLA_AF_SPEC nesting
  * lib/route: Support IFLA_BRIDGE_MODE
  * macvlan: add support for "source" mode
  * macvlan: adjust types and merge MACVLAN_HAS_MACCOUNT and
  MACVLAN_HAS_MACDATA
  * vxlan: add support for additional VXLAN attributes
  * lib/route: SRIOV Parse, Read, Clone support
  * Add PPP support
  * route/act: add gact tc action
  * link: add support for IFLA_CARRIER_CHANGES, IFLA_PHYS_PORT_NAME,
  IFLA_PHYS_SWITCH_ID, IFLA_GSO_MAX_SEGS and IFLA_GSO_MAX_SIZE</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Add nla-reserve.diff [boo#1020123]</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Update to new upstream release 3.3.0~rc1
  * sriov: fix crash in rtnl_link_sriov_parse_vflist
  * sriov: avoid buffer overrun in rtnl_link_sriov_parse_vflist()
  * use O_CLOEXEC
  * lib/attr.c: check for valid length argument in nla_reserve()
  * route: neigh: use NDA_MASTER for neigh-&gt;n_master if available
  * xfrm: allow quering optional arguments from xfrmnl_sp_get_sec_ctx()
- Drop nla-reverse.diff (included upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1496836800">- Update to final release 3.3.0
  * No changes</changelog>
</package>
<package pkgid="74de3a86b2cfc2a7c510ed973c61dc9ea81065898b49366adb97d3c45e169d52" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="3.10.1"/>
  <changelog author="mgorse@suse.com" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="werner@suse.de" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="hpj@urpla.net" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="0d8562e3667f4ad65722846683e062e4ebf0acffe5925dfe67ae69e33cfe7543" name="libnpth0" arch="x86_64">
  <version epoch="0" ver="1.5" rel="2.11"/>
  <changelog author="jengelh@inai.de" date="1338292800">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1346760000">- Update to new upstream release 0.91
  * npth_init does now return an error on failure.
  * Provide a pselect emulation for OpenBSD et al.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1411300800">- npth 1.0:
  * improvements to the build system
  * restore sigmask at fork
- spec file cleanup:
  * gpg-offline covered by source_validator
  * use source URLs</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1414929600">- npth 1.1:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1428753600">- npth 1.2:
  * Fix possible clobbering of ERRNO.</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- update to 1.3:
  * Bypass npth_protect/npth_unprotect iff the library has not yet
    been initialized.
  * Improve detection of clock_gettime
- use reproducible build timestamp</changelog>
  <changelog author="astieger@suse.com" date="1494936000">- update to 1.4:
  * fixes for platforms other than GNU/Linux
  * New function npth_is_protected to help debugging.
  * Change license from LGPLv3+/GPLv2+ to LGPLv2+.
- run tests
- update signing keyring
- package license text and other information</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- update to 1.5:
  * Fix the busy waiting emulation of pthread_mutex_timedlock for
    Unices lacking that function</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="c7849e1772681ec286bb435b84a59e1aa6f9d7d8fc66090d06917ea583f4f0ff" name="libnscd1" arch="x86_64">
  <version epoch="0" ver="2.0.2" rel="3.21"/>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="crrodriguez@suse.de" date="1241697600">- disable static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1260792000">- add baselibs.conf as a source</changelog>
  <changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328616000">- put library back into %{_libdir} , /usr merge.</changelog>
  <changelog author="jengelh@inai.de" date="1373112000">- Implement shlib package naming guidelines
- Remove redundant %clean section</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes in baselibs.conf</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505217600">- Drop ineffective --with-pic. Replace old RPM macros by new
  constructs. The package summary was updated.</changelog>
</package>
<package pkgid="0e4f3853edd4ef13af264933422d0a74b78b01f945c708a2c381d6ef9e0e81ab" name="libnsl2" arch="x86_64">
  <version epoch="0" ver="1.2.0" rel="2.44"/>
  <changelog author="dimstar@opensuse.org" date="1460030400">- Add COPYING to the library package.</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.0.5
  - Fix compiler warnings</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="kukuk@suse.com" date="1503057600">- Update to version 1.1.0
  - Fix compilation with new glibc (obsoletes decls.patch)
  - Add rpcsvc/yp.h</changelog>
  <changelog author="kukuk@suse.de" date="1504094400">- Don't install into nsl subdirectories</changelog>
  <changelog author="kukuk@suse.de" date="1504612800">- Disable static library</changelog>
  <changelog author="kukuk@suse.de" date="1505217600">- Install yppasswd.h again</changelog>
  <changelog author="kukuk@suse.de" date="1510401600">- libnsl-devel: require libtirpc-devel</changelog>
  <changelog author="kukuk@suse.de" date="1510401601">- Update to version 1.2.0
  - make code more portable
  - fix pkgconfig requires</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="ed0ad302cde38c9f332797c3362f53243b0c0a67abd02c6a608e5bf3fe251f87" name="libnss_usrfiles2" arch="x86_64">
  <version epoch="0" ver="2.25" rel="bp153.1.16"/>
  <changelog author="kukuk@suse.com" date="1490011200">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1490097600">- Filter out GLIBC_PRIVATE</changelog>
  <changelog author="kukuk@suse.de" date="1490184000">- Move Requires to correct sub-package</changelog>
  <changelog author="kukuk@suse.de" date="1490616000">- Add docu and /usr/etc as directory
- Adjust nsswitch.conf on openSUSE, too</changelog>
  <changelog author="jengelh@inai.de" date="1490875200">- RPM group correction</changelog>
  <changelog author="kukuk@suse.de" date="1515412800">- The default nsswitch.conf has changed again back to the old
  values [bsc#1074515]</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="66356646132d7ccd511ad2ad3e5d9688ced3f3d8cfa4efec7c57dee1fcfcb16c" name="libnuma1" arch="x86_64">
  <version epoch="0" ver="2.0.14.20.g4ee5e0c" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14 (SLE-17217):
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update to version 2.0.14.17.g498385e:
  * numactl.c: fix use after free
  * sysfs.c: prevent mem leak in sysfs_node_read()
  * sysfs.c: don't leak fd if fail in sysfs_read()
  * shm.c: fix memleak in verify_shm()
  * shm.c: fix memleak in dump_shm()
  * fix description for numa_node_size64 in man as well
  * fix numa_node_size definition in manpage numa.3
  * link with -latomic if needed
  * libnuma: make numa_police_memory() free of race
  * numademo: Use first two nodes instead of node 0 and 1
- Enhance _service magic
- Enable automake</changelog>
  <changelog author="trenn@suse.de" date="1630497600">- Update to version 2.0.14.20.g4ee5e0c:
  * Fix system call numbers on s390x
  * numactl.c: fixed debug verify for --preferred option
  * numactl.c: Fixed description for the usage of numactl</changelog>
</package>
<package pkgid="48e129b30ce7368c8b81bd3a700b433552930f8bdd6806931c63a36ef52fe56f" name="libogg0" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="1.24"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- add baselibs.conf as a source</changelog>
  <changelog author="reddwarf@opensuse.org" date="1291723200">- update to version 1.2.1
  * Various build updates (see SVN)
  * Add ogg_stream_pageout_fill() to API to allow applications
    greater explicit flexibility in page sizing.
  * Documentation updates including multiplexing description,
    terminology and API (incl. ogg_packet_clear(),
    ogg_stream_pageout_fill())
  * Correct possible buffer overwrite in stream encoding on 32 bit
    when a single packet exceed 250MB.
  * Correct read-buffer overrun [without side effects] under
    similar circumstances.
  * Update unit testing to work properly with new page spill
    heuristic.
  * Alter default flushing behavior to span less often and use
    larger page sizes when packet sizes are large.
  * Build fixes for additional compilers
  * Documentation updates
- run spec-cleaner
- removed configure.dif (reapply if -fsigned-char causes problems)
- removed libogg-compile-warning-fix.diff (upstreamed)</changelog>
  <changelog author="reddwarf@opensuse.org" date="1291809600">- update to version 1.2.2
  * Build fix (types correction) for Mac OS X
  * Update win32 project files to Visual Studio 2008
  * ogg_stream_pageout_fill documentation fix</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real file</changelog>
  <changelog author="reddwarf@opensuse.org" date="1321790400">- updated to version 1.3.0
  * Add ogg_stream_flush_fill() call
    This produces longer packets on flush, similar to
    what ogg_stream_pageout_fill() does for single pages.
- run spec-cleaner on it
- remove "SLES10 -&gt; SLES11 upgrade path" parts since the upgrade
  already happened and anyway the entry in bugzilla is not public</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level does not exist, use -O3</changelog>
  <changelog author="coolo@suse.com" date="1324814401">- own aclocal directory</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libogg 1.3.1
  * Guard against very large packets.
  * Respect the configure --docdir override.
  * Documentation fixes.
- fix SLE build</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 1.3.2
  * Fix an bug in oggpack_writecopy().</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Orthographic fixes to descriptions. RPM group fix.</changelog>
</package>
<package pkgid="da9ba63e8cd476479c0ca91bee362c7a922f7b0e481ac99b27157174a86218b7" name="libonig4" arch="x86_64">
  <version epoch="0" ver="6.7.0" rel="1.19"/>
  <changelog author="mrueckert@suse.de" date="1135684800">- Initial package of version 2.5.1</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mrueckert@suse.de" date="1159531200">- update to version 2.5.7:
  many fixes.</changelog>
  <changelog author="gber@opensuse.org" date="1281787200">- update to version 5.9.2:
  + many fixes
- cleanup:
  + split into liborig2 and oniguruma-devel subpackages
  + corrected license information
  + changed summary to conform with policy</changelog>
  <changelog author="i@marguerite.su" date="1410004800">- update version 5.9.5
  * [impl] escape warnings for -Wall.
  * [impl] remove unused variable.
- changes in 5.9.4
  * [dist] add oniguruma.pc.in file
- changes in 5.9.3
  * fix print_tree ENCLOSE_OPTION bug</changelog>
  <changelog author="i@marguerite.su" date="1445428800">- update version 5.9.6
  * [impl] add onigenc_end_unicode().
  * [impl] add onig_add_end_call().</changelog>
  <changelog author="mrueckert@suse.de" date="1456833600">- remove ruby build requires. seems unused.</changelog>
  <changelog author="mrueckert@suse.de" date="1502107200">- Version 6.5.0
  - [new] support Absent clear (Absent functions)
  - abolish configure option: --enable-combination-explosion-check
  - [new] support Absent functions (?~...)
  - fix #65: SIZEOF_SIZE_T doesn't exist on certain architecutres
  - [new] support \O (true anychar)
  - [new] support \K (keep)
  - add new node type: NODE_GIMMICK
  - [new] support \N (no newline)
  - [new] support \R (general newline)
  - [new] support if-then-else syntax
  - [new] support backref validity checker
- Version 6.4.0
  - fix memory leaks
  - change encoding of doc/XXXX.ja from EUC-JP to UTF-8
  - update doc/RE, and doc/RE.ja
  - fix fatal bug of endless repeat check on Windows
  - PR #62 : add check for return values
  - [new] support call zero (\g{0})
  - [new] support relative call by positive number
  - [new] support relative back-reference by positive number
  - fix #60 : check value type
  - change output format for ONIG_DEBUG_COMPILE and
    ONIG_DEBUG_MATCH
- Version 6.3.0
  - fix #60 : invalid state(CCS_VALUE) in parse_char_class()
  - fix #59 : access to invalid address by reg-&gt;dmax value
  - fix invalid increment of start position in onig_scan()
  - fix #58 : access to invalid address by reg-&gt;dmin value
  - fix #57 : DATA_ENSURE() check must be before data access
  - fix #56 : return invalid result for codepoint 0xFFFFFFFF
  - [new] add \o{17777777777} syntax.
  - fix #55 : Byte value expressed in octal must be smaller than
    256
- Version 6.2.0
  - fix: size in xmemcpy in stack_double (PR #51)
  - Initialize return value
  - NEW API: add onig_set_capture_num_limit()
  - change MemNumType from short int to int
  - fix: [0-9-a] was not allowed as [0-9\-a]
  - fix: illegal capture after recursive call
  - fix: problem with optimization of \z
  - fix: .* optimization
  - Set a limit of parser recursion
  - fix; that warnings are not shown properly
  - fix: /[a-c#]+\W/ =~ "def#" fails when encoding is UTF-16/32
  - fix: /[\x{0}-X]/i doesn't match properly when UTF-16/32 is
    used.
- Version 6.1.3
  - fix: Syntax error: redirection unexpected (expecting word) #35
- Version 6.1.2
  - allow word bound, word begin and word end in look-behind.
  - add ONIG_OPTION_CHECK_VALIDITY_OF_STRING option.
  - fix use after free node.
  - fix memory leaks after parsing regexp error.
  - implement many of is_valid_mbc_string().
- Version 6.1.1
  - fix segfault /W.?{888}{888}{888}\x00/ (found by libfuzzer)
  - fix error unmatched close parenthesis for %{(.*?)} #23
- Version 6.1.0
  - add contributed/libfuzzer-onig.cpp  (thanks hannob)
  - update LTVERSION 4:0:0
  - NEW API: onigenc_is_valid_mbc_string().
  - add is_valid_mbc_string() member into OnigEncodingType.
  - fix out of bounds read.
  - disable USE_INVALID_CODE_SCHEME.
  - doc/RE improved.
  - add onig_scan() into doc/API.
  - fix bug: Out of bounds read in onig_strcpy() #17
  - fix bug: infinite loop of backreference and group.
  - fix out of bounds read in mbc_to_code() #16
  - doc/RE refinements.
  - add onig_scan() (NEW API)
  - reimplement match stack allocation for case too many repeat
  - and too many captures in regexp.
  - number of captures &lt;= 32767 for bytecode representation.
  - don't use int_map_backward for thread-safe.
  - fix case of enclosed option in look-behind.
  - fix ignore case in look-behind.
  - fix memory leak in onig_unicode_define_user_property()
  - declare variables at the top of scope.  (thanks nmaya)
- Version 6.0.0
  - add NEW API: onig_unicode_define_user_property()
  - update Unicode data to 8.0.0
  - change OnigCodePoint type to unsigned int.
  - add doc/UNICODE_PROPERTIES.
  - add error code ONIGERR_FAIL_TO_INITIALIZE.
  - add make_win64/32.bat.
  - fix bug of uninitialized regex_t value on error.
  - reimplement Unicode case folding.
  - update LTVERSION = 3.0.0
  - remove all THREAD_ macro.
  - add init member into OnigEncoding. (add onig_initialize())
  - remove state member of regex.
  - move source files into src/
  - rename configre.in to configure.ac.
  - fix memory leak. (thanks pigzang)
  - change mail address.</changelog>
  <changelog author="avindra@opensuse.org" date="1514030400">- Version 6.7.0
  - add ONIG_SYNTAX_ONIGURUMA (default syntax)
  - restructure StackType
  - implement subexp calls (?R), (?&amp;name), (?-n), (?+n) for Perl
    syntax
  - use string pool of gperf for Unicode Property lookup function
  - fix an empty greedy regex and a word boundary (.*\b) fails
  - remove a stack type STK_POS
  - add a declaration of onig_end()
  - fix compilation failure in out-of-source build
  - [new] hexadecimal codepoint \uHHHH
- Version 6.6.1
  - fix definition of \X to (?&gt;\O(?:\Y\O)*)
- Version 6.6.0
  - rename Absent clear to Range clear
  - [new] Extended Grapheme Cluster \X and boundary \y, \Y
  - fix: invalid index(ctype) value assigned to Unicode Block
    properties
  - --enable-crnl-as-line-terminator to be deprecated
  - [new] ASCII only mode options (?WDSP)
  - [new] ONIG_OPTION_XXXX_IS_ASCII  options
  - disable OP_CCLASS_NODE
  - [spec] Absent clear restore previous range value at backtrack
  - optimize for simple one char repetition in Absent expression
  - fix: invalid impl. for reluctant repetition in Absent expression
  - remove compile switch USE_NAMED_GROUP
  - Visual Studio 2005 compilation fixed
- cleanup with spec-cleaner</changelog>
</package>
<package pkgid="18380146522f71e21c19d35446e194688980e4cece8bd6be6e1a04741af4550b" name="libopeniscsiusr0_2_0" arch="x86_64">
  <version epoch="0" ver="2.1.6" rel="150300.32.15.1"/>
  <changelog author="lduncan@suse.com" date="1620820800">- Merge latest upstream, which added fix (bsc#1185930):
  * Set default 'startup' to 'onboot' for FW nodes</changelog>
  <changelog author="lduncan@suse.com" date="1626868800">- Merge latest upstream, which includeds:
  * Support the "qede" CMA-card driver. (bsc#1188579)
  * iscsistart: fix null pointer deref before exit</changelog>
  <changelog author="lduncan@suse.com" date="1629460800">- Merged latest upstream, which includes:
  * iscsid: set PR_SET_IO_FLUSHER (bsc#1188869)</changelog>
  <changelog author="lduncan@suse.com" date="1631102400">- Updated to latest upstream 2.1.5 as 2.1.5-suse, which contains
  these changes not already present:
  * Handle IPv6 interfaces correctly. (bsc#1187958)
  * Handle qedi correctly in NPAR mode (bsc#1187958)
  * Update iscsiadm man page (bsc#1187958)
  * Update iface.example for ipv6
  * Change iscsi IP type from defines to enum.
  * Handle recv() returning 0 in iscsid_response()</changelog>
  <changelog author="lduncan@suse.com" date="1633003200">- Update to latest from upstream, fixing:
  * Moving the executables from /sbin to /usr/sbin (bsc#1191054)
  * Remove default dependencies from iscsi-init.service
  (bsc#1187190)</changelog>
  <changelog author="lduncan@suse.com" date="1633435200">- Fix possible systemd cycle by adding an "obsoletes" for
  the old libopeniscsiusr for older versions.</changelog>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
</package>
<package pkgid="4867b9dc163363712e3c5b3d54400896baf1843adfe18615d59a7baf421bf933" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1d" rel="11.43.1"/>
  <changelog author="jsikes@suse.com" date="1617796800">- Don't list disapproved cipher algorithms while in FIPS mode
  * openssl-1.1.1-fips_list_ciphers.patch
  * bsc#1161276</changelog>
  <changelog author="jsikes@suse.com" date="1620734400">- Previously added patch interferes with FIPS validation.
  * Removed openssl-1.1.1-fips_list_ciphers.patch</changelog>
  <changelog author="jsikes@suse.com" date="1629288000">- A bug in the implementation of the SM2 decryption code means that the
  calculation of the buffer size required to hold the plaintext returned by the
  first call to EVP_PKEY_decrypt() can be smaller than the actual size required by
  the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is
  called by the application a second time with a buffer that is too small.
  * CVE-2021-3711
  * bsc#1189520
  * Add:
    CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch
    CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch
    CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch
- The function X509_aux_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640952000">- Add RSA_get0_pss_params() accessor that is used by nodejs16
  and provide openssl-has-RSA_get0_pss_params, fixes bsc#1192489.
  * Add patch rsa-pss.patch, provided by Adam Majer, amajer@suse.com</changelog>
  <changelog author="pmonreal@suse.com" date="1643889600">- Enable zlib compression support [bsc#1195149]
  * Add openssl-fix-BIO_f_zlib.patch to fix BIO_f_zlib: Properly
    handle BIO_CTRL_PENDING and BIO_CTRL_WPENDING calls.</changelog>
  <changelog author="pmonreal@suse.com" date="1643976000">- FIPS: Fix function and reason error codes [bsc#1182959]
  * Add openssl-1_1-FIPS-fix-error-reason-codes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1644580800">- Pull libopenssl-1_1 when updating openssl-1_1 with the same
  version. [bsc#1195792]</changelog>
  <changelog author="pmonreal@suse.com" date="1644926400">- Fix PAC pointer authentication in ARM [bsc#1195856]
  * PAC pointer authentication signs the return address against the
    value of the stack pointer, to prevent stack overrun exploits
    from corrupting the control flow. The Poly1305 armv8 code got
    this wrong, resulting in crashes on PAC capable hardware.
  * Add openssl-1_1-ARM-PAC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch</changelog>
</package>
<package pkgid="15362000981aeafed05f2741b4f9f13fd4c2be968d6ed3ea6a3d3a0880466376" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1d" rel="11.43.1"/>
  <changelog author="jsikes@suse.com" date="1617796800">- Don't list disapproved cipher algorithms while in FIPS mode
  * openssl-1.1.1-fips_list_ciphers.patch
  * bsc#1161276</changelog>
  <changelog author="jsikes@suse.com" date="1620734400">- Previously added patch interferes with FIPS validation.
  * Removed openssl-1.1.1-fips_list_ciphers.patch</changelog>
  <changelog author="jsikes@suse.com" date="1629288000">- A bug in the implementation of the SM2 decryption code means that the
  calculation of the buffer size required to hold the plaintext returned by the
  first call to EVP_PKEY_decrypt() can be smaller than the actual size required by
  the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is
  called by the application a second time with a buffer that is too small.
  * CVE-2021-3711
  * bsc#1189520
  * Add:
    CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch
    CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch
    CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch
- The function X509_aux_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640952000">- Add RSA_get0_pss_params() accessor that is used by nodejs16
  and provide openssl-has-RSA_get0_pss_params, fixes bsc#1192489.
  * Add patch rsa-pss.patch, provided by Adam Majer, amajer@suse.com</changelog>
  <changelog author="pmonreal@suse.com" date="1643889600">- Enable zlib compression support [bsc#1195149]
  * Add openssl-fix-BIO_f_zlib.patch to fix BIO_f_zlib: Properly
    handle BIO_CTRL_PENDING and BIO_CTRL_WPENDING calls.</changelog>
  <changelog author="pmonreal@suse.com" date="1643976000">- FIPS: Fix function and reason error codes [bsc#1182959]
  * Add openssl-1_1-FIPS-fix-error-reason-codes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1644580800">- Pull libopenssl-1_1 when updating openssl-1_1 with the same
  version. [bsc#1195792]</changelog>
  <changelog author="pmonreal@suse.com" date="1644926400">- Fix PAC pointer authentication in ARM [bsc#1195856]
  * PAC pointer authentication signs the return address against the
    value of the stack pointer, to prevent stack overrun exploits
    from corrupting the control flow. The Poly1305 armv8 code got
    this wrong, resulting in crashes on PAC capable hardware.
  * Add openssl-1_1-ARM-PAC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch</changelog>
</package>
<package pkgid="e9e2a3a2120f2085fafde106de01902f04e851e3a8d03a8bc9da652980750628" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1d" rel="11.43.1"/>
  <changelog author="jsikes@suse.com" date="1617796800">- Don't list disapproved cipher algorithms while in FIPS mode
  * openssl-1.1.1-fips_list_ciphers.patch
  * bsc#1161276</changelog>
  <changelog author="jsikes@suse.com" date="1620734400">- Previously added patch interferes with FIPS validation.
  * Removed openssl-1.1.1-fips_list_ciphers.patch</changelog>
  <changelog author="jsikes@suse.com" date="1629288000">- A bug in the implementation of the SM2 decryption code means that the
  calculation of the buffer size required to hold the plaintext returned by the
  first call to EVP_PKEY_decrypt() can be smaller than the actual size required by
  the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is
  called by the application a second time with a buffer that is too small.
  * CVE-2021-3711
  * bsc#1189520
  * Add:
    CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch
    CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch
    CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch
- The function X509_aux_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640952000">- Add RSA_get0_pss_params() accessor that is used by nodejs16
  and provide openssl-has-RSA_get0_pss_params, fixes bsc#1192489.
  * Add patch rsa-pss.patch, provided by Adam Majer, amajer@suse.com</changelog>
  <changelog author="pmonreal@suse.com" date="1643889600">- Enable zlib compression support [bsc#1195149]
  * Add openssl-fix-BIO_f_zlib.patch to fix BIO_f_zlib: Properly
    handle BIO_CTRL_PENDING and BIO_CTRL_WPENDING calls.</changelog>
  <changelog author="pmonreal@suse.com" date="1643976000">- FIPS: Fix function and reason error codes [bsc#1182959]
  * Add openssl-1_1-FIPS-fix-error-reason-codes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1644580800">- Pull libopenssl-1_1 when updating openssl-1_1 with the same
  version. [bsc#1195792]</changelog>
  <changelog author="pmonreal@suse.com" date="1644926400">- Fix PAC pointer authentication in ARM [bsc#1195856]
  * PAC pointer authentication signs the return address against the
    value of the stack pointer, to prevent stack overrun exploits
    from corrupting the control flow. The Poly1305 armv8 code got
    this wrong, resulting in crashes on PAC capable hardware.
  * Add openssl-1_1-ARM-PAC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch</changelog>
</package>
<package pkgid="2cf8a45c2c518670b2a341c5e1b00a9998a383941427f3cec55cddc46f1b44fe" name="libopts25" arch="x86_64">
  <version epoch="0" ver="5.18.12" rel="3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1442404800">- Update to 5.18.6
  * {AG,CL,GD}exe environment variables may be set to force
    bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
    override the current date default.
  * project may now be bootstrapped and built in the source
    directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
    time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1449489600">- Update to 5.18.7
  * {AG,CL,GD}exe environment variables may be set to force
  bootstrapping with a particular release.
  * MAN_PAGE_DATE can be used with various man page docs to
  override the current date default.
  * project may now be bootstrapped and built in the source
  directory with no ill effect.
  * AutoGen as a daemon will never happen.  Last vestiges gone.
  * templates may now obtain the most recent source modification
  time with "(max-file-time)"</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Split shared libraries (boo#976068)
- Move info handling to preun section
- Do not ship .la file</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Fix typo in preun script</changelog>
  <changelog author="mpluskal@suse.com" date="1462449600">- Rename devel package to libopts-devel
- Add corresponding obsoletion</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- GNU autogen 5.18.10:
  * NUL terminate CGI definitions text
- GNU autogen 5.18.9:
  * When parsing CGI, do not allow spaces to be lost
  * In producing usage text, check more rigorously that
    option "values" are really not flag characters.
- GNU autogen 5.18.8:
  * Ensure testing vars start as unset for testing
  * happy new year &amp; de-uglifications
- update download URL and usptream signing key</changelog>
  <changelog author="mpluskal@suse.com" date="1483876800">- Update to version 5.8.12:
  * several configury fixes to enable cross platform building.
  * fompletion of a change in "char-mapper" to enable bootstrapping</changelog>
  <changelog author="bwiedemann@suse.com" date="1487764800">- Add autogen-catch-race-error.patch (boo#1021353)</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Add patch to build with guile 2.2:
  * autogen-guile-2.2.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add reproducible.patch to normalize tar
- Normalize date in man-pages (boo#1047218)</changelog>
</package>
<package pkgid="6a2b137bf9d1fb5ab8a853dc8cd25b7715f2fbe9c1f20e68256e018c25408cbd" name="libopus0" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1489233600">- Rename %soname to %sover to better reflect its use.
  RPM group fix.</changelog>
  <changelog author="idonmez@suse.com" date="1495972800">- Update to version 1.1.5
  + This release backports the surround encoder bug fix from
    1.2-beta branch</changelog>
  <changelog author="aloisio@gmx.com" date="1497960000">- Update to version 1.2
  + Speech quality improvements especially in the 12-20 kbit/s
    range
  + Improved VBR encoding for hybrid mode
  + More aggressive use of wider speech bandwidth, including
    fullband speech starting at 14 kbit/s
  + Music quality improvements in the 32-48 kb/s range
  + Generic and SSE CELT optimizations
  + Support for directly encoding packets up to 120 ms
  + DTX support for CELT mode
  + SILK CBR improvements
  + Support for all of the fixes in
    draft-ietf-codec-opus-update-06 (the mono downmix and the
    folding fixes need --enable-update-draft)
  + Many bug fixes, including integer wrap-arounds discovered
    through fuzzing (no security implications)
- Removed static package</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Cleanup with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1498478400">- Update to version 1.2.1:
  + This fixes an issue where the encoder can misdetect that the
    signal is SWB instead of FB, lowpassing the signal. This patch
    makes the encoder much more careful about doing that.</changelog>
  <changelog author="mcepl@suse.com" date="1539864000">- Update to 1.3:
  - improved speech/music detection based on a neural network
  - low-bitrate speech improvements
  - support for immersive audio using ambisonics
  - tone quality improvements
  - updates to the Opus standard (rfc 8251) are on by default
  - security improvements
- Clean up SPEC to the latest standards</changelog>
  <changelog author="aloisio@gmx.com" date="1558785600">- Update to version 1.3.1
  * This release fixes an issue with the analysis on files with
    digital silence (all zeros), especially on x87 builds
    (mostly affects 32-bit builds).
  * Two new features:
    + A new OPUS_GET_IN_DTX query to know if the encoder is in
    DTX mode (last frame was either a comfort noise frame or
    not encoded at all)
    + A new (and still experimental) CMake-based build system
    that is eventually meant to replace the VS2015 build
    system (the autotools one will stay).</changelog>
  <changelog author="dimstar@opensuse.org" date="1565265600">- Own %{_datadir}/aclocal: when we might switch to pkgconf instead
  of pkg-config, nothing in the build root is 'accidentally' owning
  this directory for us.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565870400">- Add 2 upstream bug fixes for Silk:
  * opus-Silk-CNG-adapts-faster.patch: Silk CNG adapts faster to
    received packets with lower gains.
  * opus-Silk-fix-arm-optimization.patch: Avoid processing LPC
    coeffs beyond the given order in NEON optimizations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1594382400">- Add opus-fix-celt-decoder-assertion.patch: When using
  OPUS_CUSTOM, CELTDecoder-&gt;end can be larger than 21.
  This causes builds with CUSTOM_MODES and either ENABLE_HARDENING
  or ENABLE_ASSERTIONS to crash. This patch fixes it.
  (bsc#1172526)</changelog>
</package>
<package pkgid="3159a3038e1eb17e8f8259322bc5b81eaf0e5f161d72dc2524da6fe56705d6ca" name="liborc-0_4-0" arch="x86_64">
  <version epoch="0" ver="0.4.28" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1425038400">- disable make check for ppc64le archi
  would need changes in orcprogram-altivec.c
  and define of HAVE_POWERPC</changelog>
  <changelog author="zaitor@opensuse.org" date="1436443200">- Update to version 0.4.24:
  + Only reuse constants of the same size and value.
  + Fix reading of .orc files with Windows line endings on Windows.
  + Fix out of bounds array access in the tests.
  + Remove duplicate code path in orcc.
  + Put a limit to the memcpy test.
  + Fix mmap leak on error path.</changelog>
  <changelog author="dmueller@suse.com" date="1443441600">- disable testsuite on aarch64</changelog>
  <changelog author="zaitor@opensuse.org" date="1457179200">- Update to version 0.4.25:
  + compiler: also prefer the backup function when no target,
    instead of trying to use emulation which is usually slower.
  + executor: fix load of parameters smaller than 64 bits, fixing
    crashes on ldresnearb and friends in emulated code.
  + test-limits: improve test without target.
  + Only check for Android's liblog on Android targets, so we don't
    accidentally pick up another liblog that may exist elsewhere.
  + Don't require libtool for uninstalled setups (-uninstalled
    pkg-config file).
  + Make -Bsymbolic check in configure work with clang.
  + Coverity code analyser fixes.
  + docs: update generated opcode tables.
  + Add orc_version_string() function and make orcc check the
    liborc that is being picked up to make sure the right lib is
    being used.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472644800">- Update to version 0.4.26:
  + Use 64 bit arithmetic to increment the stride if needed.
  + Fix generation of ModR/M / SIB bytes for the EBP, R12, R13
    registers on X86/X86-64.
  + Fix test_parse unit test if no executable backend is available.
  + Add orc-test path to the -uninstalled .pc file.
  + Fix compiler warnings in the tests on OS X.
- Add pkgconfig(glib-2.0) BuildRequires, the build looks for it.
- Remove obsolete bconds, they were only there for now obsolete
  versions of openSUSE.
- Drop explicit xz BuildRequires: No longer needed.
- Enable testsuite for all arches again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486900800">- Disable make check for all arches except x86_64 again.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500292800">- Update to version 0.4.27:
  + sse: preserve non volatile sse registers, needed for MSVC.
  + x86: don't hard-code register size to 0 in orc_x86_emit_*()
    funcs.
  + Fix incorrect asm generation on 64-bit Windows with MSVC.
  + Add support for building using the Meson build system.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Switch to the meson build system, which knows how to cope with
  GTK 1.26+:
  + Use the tarball published on github (the automake bootstrapped
    one does not contain the meson build system).
  + Add meson BuildRequires and switch configure/make/make_install
    macros to the relevant meson/meson_build/meson_install
    variants.</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Update to version 0.4.28:
  + Numerous undefined behaviour fixes.
  + Ability to disable tests.
  + Fix meson dist behaviour.</changelog>
  <changelog author="idonmez@suse.com" date="1555502400">- Add relax-tests.patch to increase test timeouts to 2 minutes,
  also limit the max value for memcpy_speed.c test bsc#1130085</changelog>
</package>
<package pkgid="f6f7334a277022c1860b2c7163772a95703de209b05e6d0ea578faad54487e53" name="libosinfo" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="1.52"/>
  <changelog author="jengelh@inai.de" date="1549281600">- Use noun phrase in summaries.</changelog>
  <changelog author="carnold@suse.com" date="1551441600">- Update to version 1.4.0
  Changes in this release include:
  * Add isodata test files for more distros
  * Refreshed translations from Zanata
  * Drop deprecated gnome-common and intltool
  * Fix test cases checking for medias, trees and images URIs due to
    libcurl issues when reusing the curl handler
  * Fix media identification when its identifiers have the maximum
    allowed size
  * Fix filling up the media properties when identifying it
  * Improvements in the tests in order to reduce code duplication
  * Add one test case per OS for medias, trees and images URIs tests
  * Add OSINFO_RELEASE_STATUS_ROLLING release status
  * Add API to add an installer script to a media
  * Add API to get all the installer scripts from a media</changelog>
  <changelog author="carnold@suse.com" date="1554897600">- Upstream bug fixes from Fabiano Fidêncio &lt;fabiano@fidencio.org&gt;
  0001-media-Fix-usage-of-application-id.patch
  0002-loader-Properly-load-the-arch-value-for-images.patch</changelog>
  <changelog author="carnold@suse.com" date="1557403200">- Update to version 1.5.0
  Changes in this release include:
  * Add API to get an OS from OsinfoTrees &amp; OsinfoImages
  * Add API to set an OS to OsinfoTrees &amp; OsinfoImages
  * Add API to get the OS variants from OsinfoTrees &amp; OsinfoImages
  * Add API to set the installation URL to a OsinfoInstallConfig
  * Add API to get all short-ids from an OsinfoProduct
  * Improve OsinfoLoader in order to fully support multiple short-ids values on
    an OsinfoProduct
  * Improve osinfo-detect tool's help wording
  * Improve osinfo-detect tool, making it aware of OsinfoTree's OS variants
  * Fix the loading of the architecture value of OsinfoImages
  * Fix usage of application id on media detection
  * Accept "all" as a valid fallback architecture for OsinfoTrees &amp; OsinfoMedias
  * Improve treeinfo check by checking for both ".treeinfo" and "treeinfo" files
  * Explicitly set GVFS as a requirement in the project spec file
  * Move osinfo-db related tests to osinfo-db project
- Drop
  0001-media-Fix-usage-of-application-id.patch
  0002-loader-Properly-load-the-arch-value-for-images.patch</changelog>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
</package>
<package pkgid="dd4fa536a302f247e6f8730fd8869ecc2387e1bb476a5ddf243df5a5849889a0" name="libosinfo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="1.52"/>
  <changelog author="jengelh@inai.de" date="1549281600">- Use noun phrase in summaries.</changelog>
  <changelog author="carnold@suse.com" date="1551441600">- Update to version 1.4.0
  Changes in this release include:
  * Add isodata test files for more distros
  * Refreshed translations from Zanata
  * Drop deprecated gnome-common and intltool
  * Fix test cases checking for medias, trees and images URIs due to
    libcurl issues when reusing the curl handler
  * Fix media identification when its identifiers have the maximum
    allowed size
  * Fix filling up the media properties when identifying it
  * Improvements in the tests in order to reduce code duplication
  * Add one test case per OS for medias, trees and images URIs tests
  * Add OSINFO_RELEASE_STATUS_ROLLING release status
  * Add API to add an installer script to a media
  * Add API to get all the installer scripts from a media</changelog>
  <changelog author="carnold@suse.com" date="1554897600">- Upstream bug fixes from Fabiano Fidêncio &lt;fabiano@fidencio.org&gt;
  0001-media-Fix-usage-of-application-id.patch
  0002-loader-Properly-load-the-arch-value-for-images.patch</changelog>
  <changelog author="carnold@suse.com" date="1557403200">- Update to version 1.5.0
  Changes in this release include:
  * Add API to get an OS from OsinfoTrees &amp; OsinfoImages
  * Add API to set an OS to OsinfoTrees &amp; OsinfoImages
  * Add API to get the OS variants from OsinfoTrees &amp; OsinfoImages
  * Add API to set the installation URL to a OsinfoInstallConfig
  * Add API to get all short-ids from an OsinfoProduct
  * Improve OsinfoLoader in order to fully support multiple short-ids values on
    an OsinfoProduct
  * Improve osinfo-detect tool's help wording
  * Improve osinfo-detect tool, making it aware of OsinfoTree's OS variants
  * Fix the loading of the architecture value of OsinfoImages
  * Fix usage of application id on media detection
  * Accept "all" as a valid fallback architecture for OsinfoTrees &amp; OsinfoMedias
  * Improve treeinfo check by checking for both ".treeinfo" and "treeinfo" files
  * Explicitly set GVFS as a requirement in the project spec file
  * Move osinfo-db related tests to osinfo-db project
- Drop
  0001-media-Fix-usage-of-application-id.patch
  0002-loader-Properly-load-the-arch-value-for-images.patch</changelog>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
</package>
<package pkgid="6d11bc3b1dd54618fc292177e1dbf7d1dc4c456a7e64fd2f80c0ecad4df8264e" name="libp11-kit0" arch="x86_64">
  <version epoch="0" ver="0.23.2" rel="4.13.1"/>
  <changelog author="lnussel@suse.de" date="1409313600">- new version 0.20.3
  * Fix problems reinitializing managed modules after fork
  * Fix bad bookeeping when fail initializing one of the modules
  * Fix case where module would be unloaded while in use [#74919]
  * Remove assertions when module used before initialized [#74919]
  * Fix handling of mmap failure and mapping empty files [#74773]
  * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions
  * Require automake 1.12 or later
  * Build fixes for Windows [#76594 #74149]
- apply patches to avoid errors from certificates with invalid public key
  (fdo#82328, bnc#890908,
  trust-Dont-use-invalid-public-keys-for-looking-up-.patch,
  trust-Print-label-of-certificate-when-complaining-.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="lnussel@suse.de" date="1626782400">- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993,
  0001-trust-Support-CKA_NSS_-SERVER-EMAIL-_DISTRUST_AFTER.patch)
- add bcond to spec file to enable debug easily</changelog>
  <changelog author="meissner@suse.com" date="1638878400">- 0001-common-Use-reallocarray-instead-of-realloc-as-approp.patch
  0001-Check-for-arithmetic-overflows-before-allocating.patch
  0001-Follow-up-to-arithmetic-overflow-fix.patch:
  Fixed multiple integer overflows in rpc code (bsc#1180064
  CVE-2020-29361)</changelog>
</package>
<package pkgid="cc770dec5f52d6ccaef20b253418d15050075fc81db9e15c81475810fa3e734b" name="libpango-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.44.7+11" rel="1.25"/>
  <changelog author="bjorn.lie@gmail.com" date="1564833600">- Update to version 1.44.2:
  + Disable ligatures when letterspacing.
  + Set design coords on hb_font_t.
  + Expose more font options in pango-view.
  + OS X: Make 'system-ui' font work.
  + Keep deprecated pango-fc apis in headers.
  + Make hex boxes work, always.
  + introspection:
  - Various build fixes.
  - Add PangoPT, PangoFT2 namespaces.
  + layout: Make the new line-spacing opt-in.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564920000">- Update to version 1.44.3:
  + Install pango-ot headers.
  + Make subpixel positioning optional.
  + fc: Ignore fonts with unsupported formats.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Update to version 1.44.4:
  + Add an insert-hyphens attribute.
  + Reinstate the return type of pango_fc_font_lock_face.
  + Fix a problem with ellipses getting the wrong font.
  + fc: Improve filtering by font format.
  + Re-add PangoFcFont to public headers.
  + Install PangoFc and PangoOT introspection files.
  + Fix ink rectangles to have positive height.
  + Fix mark positioning.
  + Switch to using harfbuzz for metrics.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 1.44.5:
  + Revert a broken change (causing crashes on OS X).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567512000">- Update to version 1.44.6:
  + docs: Fix symbol indices.
  + Fix Thai line breaking.
  + Re-add symbols needed by some bindings.
  + Don't insert hyphens for some languages.
  + Fix a crash with hyphenation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568462400">- Modernize spec, prepare for possible spliting of package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570795200">- Switch to git-checkout via source service, explicit tag. Upstream
  tarball is borked.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572004800">- Update to version 1.44.7:
  + Fix tests without libthai.
  + Small speedup to Emoji iteration.
  + Bring back PangoFontsetSimple (pygtk bind it).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572696000">- Update to version 1.44.7+8:
  + Undo fontset deprecations.
  + Adjust expected test outputs.
  + Fix ItemProperties handling.
  + Don't treat rise as a no-shape attribute.
  + Drop an unused ItemProperties use.
  + Go back to ignoring underlines for itemization.
  + fc: remove another assertion that might trigger.
- Switch to using pango 1.44 stable git branch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574856000">- Update to version 1.44.7+11:
  * Add a test for ellipsis shaping
  * Use shape flags for ellipsis
  * test-shape: Cosmetics</changelog>
</package>
<package pkgid="d3d382aa92f9cecd8301ab760c6fb67fbad85364def2e4d60f9b623fe0c74c9b" name="libparted0" arch="x86_64">
  <version epoch="0" ver="3.2" rel="19.1"/>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
</package>
<package pkgid="bd66440c94daca150fb52bd616da69558c302740534d7237224d8a0a1a7b3633" name="libpath_utils1" arch="x86_64">
  <version epoch="0" ver="0.2.1" rel="3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="scabrero@suse.de" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="5c8b29630300d5a7efadbbd95272a9b4952c217b5c8f9f542ea2d6a874532364" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.9.1" rel="1.33"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
</package>
<package pkgid="fc8815a6fab0205503cc5d9870298c6cfe5323de8209cd69d1d0164913b2e9a0" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.3.1"/>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
</package>
<package pkgid="adac63f0bc0e2f4cd6a43f8fe548c8c315992e71aac6ea0897991bc078ae792f" name="libpciaccess0" arch="x86_64">
  <version epoch="0" ver="0.14" rel="1.16"/>
  <changelog author="sndirsch@suse.com" date="1326196800">- added libtool to Buildrequires to fix build on factory</changelog>
  <changelog author="jengelh@medozas.de" date="1329134400">- Update to new upstream release 0.12.902
  * ships new map_legacy APIs required by the current development
  version of xorg-server as well as miscelaneous bug fixes.
- Rename main package from libpciaccess0 to libpciaccess.
  Do away with the 0 in libpciaccess0-devel, since the devel
  package is not actually versioned and only one can be installed.
- Parallel build with %_smp_mflags</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 0.13.1:
  + linux: Fix out[bwl] macros on non-I/O architectures
  + Fix pci_io_handle allocation routines to provide sound stable
    memory allocation
  + Fix in OpenBSD support
- Changes from version 0.13:
  + linux: Don't use /dev/port
  + Use O_CLOEXEC for internal file descriptors
  + delete_io_handle: fix deletion of last handle causing crash
  + Fix leak and compiler warnings
  + Improvements to OpenBSD and Solaris support</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1375444800">- u_libpciaccess-vgaarb-add-function-to-get-default-vga-device-and-it.patch:
  Reenable default device when shutting down VGA arbitration.
  (bnc#714677, bnc#832973).</changelog>
  <changelog author="zaitor@opensuse.org" date="1376740800">- Update to version 0.13.2:
  + Fix Sun bug #7035791: scanpci should report 64 bit registers.
  + Resync COPYING file with copyrights/licenses from code.
  + pci_device_solx_devfs_probe: implicit conversion changes
    signedness warnings.
  + pci_device_solx_devfs_read: fix sign conversion/comparison
    warnings.
  + Support more pci functions on NetBSD.
  + Update NetBSD support and fix build on NetBSD-4.
  + Enable boot_vga support only if WSDISPLAYIO_GET_BUSID is
    defined. Fixes build on NetBSD-5.
  + Add legacy IO routines for FreeBSD (fdo#63583).
  + pci_id_file_open: move variable inside the #ifndef that uses
    it.
  + Define PCI_MATCH_ANY as an unsigned int.
  + Move 'const' to correct place, so it has meaning.
  + Protect config.h like usual.
  + autogen.sh: Implement GNOME Build API
  + configure: Remove AM_MAINTAINER_MODE
  + PCI: set correct mask value when matching for bridges.
  + scanpci: print meaningful info on BASEROM
  + libpciaccess:
  - sparc rom read fix
  - implementation of boot_vga in Solaris
  - fix memory usage errors
  + Implement legacy io &amp; map for x86 backend
  + Solaris:
  - Refactor pci_device_solx_devfs_map_range to reduce code
    duplication.
  - Implement map_legacy &amp; legacy_io functions.
  - Probe improvement.
  - Add domain support for sparc platform.
  - Remove #defines for Ultra 45 southbridge device ids.</changelog>
  <changelog author="sndirsch@suse.com" date="1423483200">- Update to version 0.13.3
  * This release provides a number of platform-specific improvements
    for various platforms, including Linux, Solaris, OpenBSD, NetBSD,
    and Hurd, plus the addition of some support for Cygwin.
- added baselibs.conf as source to specfile in order to make factory
  checkin policy happy</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">-  Update to version 0.13.4
  * Add missing guards around config.h inclusion
  * Check for __linux__ instead of linux during compilation
  * Include the POSIX fcntl.h instead of sys/fcntl.h
  * Include config.h before any other headers.
  * Bug 89151: Fix build on NetBSD/alpha and NetBSD/sparc64.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1491652800">- Update to version 0.13.5:
  This release includes musl build fixes, improvements to the
  Solaris backend and allows parsing separate sysfs files rather
  than reading the config file on newer kernels.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1508760000">- Update to version 0.14:
  This release adds support for 32-bit PCI domain IDs, which are common in
  virtualized environments. This support has been tested on Linux, and probably
  also "just works" on FreeBSD and Solaris, to the extent that the underlying
  OS supports it.</changelog>
</package>
<package pkgid="387c2c378d53c7d850a033007500de698055d0d2fe0f077f118059824a2f6ce6" name="libpcre1" arch="x86_64">
  <version epoch="0" ver="8.45" rel="20.10.1"/>
  <changelog author="astieger@suse.com" date="1470052800">- record minor vulnerabilities fixed in 8.39</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1486641600">- pcre 8.40:
  * Using -o with -M in pcregrep could cause unnecessary repeated
    output when the match extended over a line boundary.
  * Fix register overwite in JIT when SSE2 acceleration is enabled.
  * Ignore "show all captures" (/=) for DFA matching.
  * Fix JIT unaligned accesses on x86
  * In any wide-character mode (8-bit UTF or any 16-bit or 32-bit
    mode), without PCRE_UCP set, a negative character type such as
    \D in a positive class should cause all characters greater than
    255 to match, whatever else is in the class. There was a bug
    that caused this not to happen if a Unicode property item was
    added to such a class, for example [\D\P{Nd}] or [\W\pL].
  * When pcretest was outputing information from a callout, the
    caret indicator for the current position in the subject line
    was incorrect if it was after an escape sequence for a
    character whose code point was greater than \x{ff}.
  * A pattern such as (?&lt;RA&gt;abc)(?(R)xyz) was incorrectly compiled
    such that the conditional was interpreted as a reference to
    capturing group 1 instead of a test for recursion. Any group
    whose name began with R was misinterpreted in this way. (The
    reference interpretation should only happen if the group's name
    is precisely "R".)
  * A number of bugs have been mended relating to match start-up
    optimizations when the first thing in a pattern is a positive
    lookahead. These all applied only when PCRE_NO_START_OPTIMIZE
    was *not* set:
    + A pattern such as (?=.*X)X$ was incorrectly optimized as if
    it needed both an initial 'X' and a following 'X'.
    + Some patterns starting with an assertion that started with
    .* were incorrectly optimized as having to match at the start
    of the subject or after a newline. There are cases where this
    is not true, for example, (?=.*[A-Z])(?=.{8,16})(?!.*[\s])
    matches after the start in lines that start with spaces.
    Starting .* in an assertion is no longer taken as an
    indication of matching at the start (or after a newline).</changelog>
  <changelog author="mpluskal@suse.com" date="1496404800">- Enable jit on aarch64
- Enable profiled building</changelog>
  <changelog author="astieger@suse.com" date="1500984000">- pcre 8.41:
  * If pcregrep in multiline mode with --only-matching matched
    several lines, it restarted scanning at the next line instead
    of moving on to the end of the matched string, which can be
    several lines after the start.
  * Fix a missing else in the JIT compiler reported by 'idaifish'.
    CVE-2017-6004 bsc#1025709
  * A (?# style comment is now ignored between a basic quantifier
    and a following '+' or '?' (example: /X+(?#comment)?Y/.
  * Avoid use of a potentially overflowing buffer in pcregrep
  * Fix issues reported by fuzzers in pcretest:
  - Check for values &lt; 256 when calling isprint() in pcretest.
  - Give an error for too big a number after \O.
  * In the 32-bit library in non-UTF mode, an attempt to find a
    Unicode property for a character with a code point greater than
    0x10ffff (the Unicode maximum) caused a crash.
    CVE-2017-7186 bsc#1030066, CVE-2017-7244 bsc#1030807
  * The alternative matching function, pcre_dfa_exec() misbehaved
    if it encountered a character class with a possessive repeat,
    for example [a-f]{3}+.
  * When pcretest called pcre_copy_substring() in 32-bit mode, it
    set the buffer length incorrectly, which could result in buffer
    overflow. CVE-2017-7245 bsc#1030805, CVE-2017-7246 bsc#1030803</changelog>
  <changelog author="matz@suse.com" date="1505217600">- RunTest needs much stack, on s390x more than the default
  8 MB.  [bnc#1046102]</changelog>
  <changelog author="kstreitova@suse.com" date="1509537600">- add pcre-8.41-stack_frame_size_detection.patch to fix pcre stack
  frame size detection because modern compilers broke it by cloning
  and inlining pcre match() function [bsc#1058722]</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bwiedemann@suse.com" date="1620734400">- Do not run profiling 'check' in parallel
  to make package build reproducible (boo#1040589)</changelog>
  <changelog author="coolo@suse.com" date="1634644800">- pcre 8.45 (the final release)
  * Fixed a small (*MARK) bug in the interpreter (Bugzilla #2771).
- pcre 8.44
  * Small patch to pcreposix.c to set the erroroffset field to -1 immediately
  after a successful compile, instead of at the start of matching to avoid a
  sanitizer complaint (regexec is supposed to be thread safe).
  * Check the size of the number after (?C as it is read, in order to avoid
  integer overflow. (bsc#1172974, CVE-2020-14155)
  * Tidy up left shifts to avoid sanitize warnings; also fix one NULL deference
  in pcretest.
- pcre 8.43
  * In a pattern such as /[^\x{100}-\x{ffff}]*[\x80-\xff]/ which has a repeated
  negative class with no characters less than 0x100 followed by a positive class
  with only characters less than 0x100, the first class was incorrectly being
  auto-possessified, causing incorrect match failures.
  * If the only branch in a conditional subpattern was anchored, the whole
  subpattern was treated as anchored, when it should not have been, since the
  assumed empty second branch cannot be anchored. Demonstrated by test patterns
  such as /(?(1)^())b/ or /(?(?=^))b/.
  * Fix subject buffer overread in JIT when UTF is disabled and \X or \R has
  a greater than 1 fixed quantifier. This issue was found by Yunho Kim.
  (bsc#1172973 CVE-2019-20838)
  * If a pattern started with a subroutine call that had a quantifier with a
  minimum of zero, an incorrect "match must start with this character" could be
  recorded. Example: /(?&amp;xxx)*ABC(?&lt;xxx&gt;XYZ)/ would (incorrectly) expect 'A' to
  be the first character of a match.
- pcre 8.42
  * If a backreference with a minimum repeat count of zero was first in a
  pattern, apart from assertions, an incorrect first matching character could be
  recorded. For example, for the pattern /(?=(a))\1?b/, "b" was incorrectly set
  as the first character of a match.
  * Fix out-of-bounds read for partial matching of /./ against an empty string
  when the newline type is CRLF.
  * When matching using the the REG_STARTEND feature of the POSIX API with a
  non-zero starting offset, unset capturing groups with lower numbers than a
  group that did capture something were not being correctly returned as "unset"
  (that is, with offset values of -1).
  * Matching the pattern /(*UTF)\C[^\v]+\x80/ against an 8-bit string
  containing multi-code-unit characters caused bad behaviour and possibly a
  crash. This issue was fixed for other kinds of repeat in release 8.37 by change
  38, but repeating character classes were overlooked.</changelog>
</package>
<package pkgid="d7fd304853e7b56c3af9e7d399588340af0348fe8cb60b74626efbe479d64aaa" name="libpcre2-8-0" arch="x86_64">
  <version epoch="0" ver="10.31" rel="3.3.1"/>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
</package>
<package pkgid="91dbd41b3488570783e1968393f6fd328703cfbce27d1866a9e8ab99e8d2344d" name="libpcsclite1" arch="x86_64">
  <version epoch="0" ver="1.8.24" rel="1.14"/>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
</package>
<package pkgid="b4485fcb076a8101d88b2d589708d76979a7459136024a97d31e491a7c085c18" name="libpgm-5_2-0" arch="x86_64">
  <version epoch="0" ver="5.2.122" rel="5.3.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1353585600">- initial version (5.1.118)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1420718400">- Update to 5.2.122 (no upstream changelog available)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1421150400">- Fix package to conform openSUSE packaging standards
  * rename to openpgm to match with upstream and pkgconfig name
  * cleanup weird build systemd and use standard macros
  * cleanup description
  * move protocol description to devel file
  * drop static library</changelog>
  <changelog author="jengelh@inai.de" date="1422964800">- Update description and RPM groups</changelog>
  <changelog author="bwiedemann@suse.com" date="1507291200">- Add libpgm-5.2.122-reproducible.patch to make build reproducible
  (boo#1047218)</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1508846400">- Create m4 directory before running autoreconf -fi to avoid build
  failure on CentOS 6 due to older version of autoconf.</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build -32bit packages, which are needed by
  zeromq's -32bit implementation. [bsc#1146257]</changelog>
  <changelog author="luca.boccassi@gmail.com" date="1548676800">- Backport patches from upstream to avoid adding a non-existing
  foo/lib/pgm-5.2/include directory to pkg-config's CFLAGS which
  breaks applications using strict compiler flags, and to make the
  build reproducible regardless of the reported system/architecture
  Added:
- libpgm-5.2.122-pkg-config-do-not-add-I-to-non-existing-directory.patch
- libpgm-5.2.122-reproducible-architecture.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">- Add libpgm-5.2.122-configure-rdtsc-checking-chg.patch
  same as https://github.com/steve-o/openpgm/pull/63</changelog>
</package>
<package pkgid="9389f6360c2c033c9dbd7d222875619e8e82538f2d2789b53b960c549aa8f7c9" name="libpixman-1-0" arch="x86_64">
  <version epoch="0" ver="0.34.0" rel="7.2.1"/>
  <changelog author="dmueller@suse.com" date="1382184000">- Disable neon on all %arm platforms.</changelog>
  <changelog author="dimstar@opensuse.org" date="1384776000">- Update to version 0.32.4:
  + Fix the SSSE3 CPUID detection.
- Changes from version 0.32.2:
  + Build fixes.
- Changes from version 0.32.0:
  + This release contains performance improvements to bilinear
    scaling, and a large number of bug fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1402056000">- RENDER extension hotfix: Add --disable-vmx for PPC64LE.
  This makes the RENDER extension work for the time being.
  Proper fix for vmx will come later (bnc#876757) (from Egbert
  Eich).</changelog>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.32.6:
  + MIPS: Fix exported symbols in public API.
  + build: Check if the compiler supports GCC vector extensions.
  + Bugs fixed: rh#972647, fdo#69014.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440244800">- Update to version 0.33.2:
  + ARMv6 - Many fast paths implementations were added.
  + PPC64/PPC64LE - Fix all outstanding bugs and add many fast
    paths implementations using vmx.
  + Major enhancements to lowlevel-blt-bench utility.
  + A couple of fixes and enhancements to mmx code.</changelog>
  <changelog author="zaitor@opensuse.org" date="1445947200">- Update to version 0.33.4:
  + Important security fix to prevent stack buffer overflow.
  + POWER: New fast-paths and optimizations to existing fast-paths.
  + ARMv6: New fast-path.
  + Tests: New cover and fence-image-self tests.
  + Remove redundant corrections in various calculations for
    COVER-CLIP and COVER analysis.</changelog>
  <changelog author="zaitor@opensuse.org" date="1451736000">- Update to version 0.33.6:
  + configura.ac: fix test for SSE2 &amp; SSSE3 assembler support.
  + mmx: Improve detection of support for "K" constraint.
  + Revert "mmx: Use MMX2 intrinsics from xmmintrin.h directly".</changelog>
  <changelog author="zaitor@opensuse.org" date="1454328000">- Update to version 0.34.0:
  + No changes from last version, stable version release only.</changelog>
  <changelog author="zaitor@opensuse.org" date="1459771200">- Add pixman-private-correct-include.patch: pixman-private: include
  &lt;float.h&gt; only in C code, patch from upstream git.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
</package>
<package pkgid="1d2d1a2ec67c3205451aadc2f3446bed46b5975ee43122fa0d404e448740466e" name="libpmem1" arch="x86_64">
  <version epoch="0" ver="1.9" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1536062400">- Update to new upstream release 1.4.2
  * common: support for concatenated Device-DAX devices
    with 2M/1G alignment
  * pmem: add support for "deep flush" operation
  * common: add experimental support for aarch64
- Split development documentation into its own package so it does
  not always get installed for the build service.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1540814400">- Update to PMDK 1.5 (FATE#326234)
  * New features:
  * common: unsafe shutdown detection (SDS)
  * common: detection and repair of uncorrectable memory errors
    (bad blocks)
  * pool: new "feature" subcommand for enabling and disabling
    detection of unsafe shutdown and uncorrectable memory errors
  * common: auto flush detection on Windows (on Linux since 1.4)
  * pmreorder: new tool for verification of persistent memory
    algorithms
  * obj: new on media layout
  * pmem/obj: new flexible memcpy|memmove|memset API
  * obj: new flushing APIs: pmemobj_xpersist, pmemobj_xflush
    (PMEMOBJ_F_RELAXED)
  * rpmem: new flag RPMEM_PERSIST_RELAXED for rpmem_persist
  * obj: lazily initialized volatile variables (pmemobj_volatile)
    (EXPERIMENTAL)
  * obj: allocation classes with alignment
  * obj: new action APIs: pmemobj_defer_free, POBJ_XRESERVE_NEW,
    POBJ_XRESERVE_ALLOC
  * blk/log: new "ctl" API
  * Optimizations:
  * obj: major performance improvements for AEP NVDIMMs
  * obj: better space utilization for small allocations
  * common: call msync only on one page for deep drain
  * Other changes:
  * The libpmemcto library has been removed
  * obj: remove actions limit
  * common: new dependency on libndctl
  * pmempool: the "convert" subcommand is now a wrapper around
    pmdk-convert
  * C++ bindings have been split off to a separate project
    (libpmemobj-cpp)
  * Bug fixes:
  * obj: fix type numbers for pmemobj_list_insert_new
  * pmem: fix inconsistency in pmem_is_pmem
  * daxio: fix checking and adjusting length</changelog>
  <changelog author="jengelh@inai.de" date="1541505600">- Restore pmdk-tools package</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133276).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1557748800">- Update to PMDK 1.6 (jsc#SLE-5400)
  - See ChangeLog for details</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1557921600">- Disable Werror to deal with a new GCC 9 warning.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570795200">- Update to PMDK 1.7 (jsc#SLE-9886)
  - Introduces new APIs in libpmemobj for managing space used by transactions.
    (see pmemobj_tx_log_append_buffer man page for details)
  - Introduces new APIs in librpmem, splitting rpmem_persist into rpmem_flush
    and rpmem_drain, allowing applications to use the flush + drain model
    already known from libpmem. (libpmemobj does not use this feature yet)
  - Optimizes large libpmemobj transactions by significantly reducing
    the amount of memory modified at the commit phase.
  - Optimizes tracking of libpmemobj reservations.
  - Adds new flags for libpmemobj's pmemobj_tx_xadd_range[_direct] API:
    POBJ_XADD_NO_SNAPSHOT and POBJ_XADD_ASSUME_INITIALIZED, allowing
    applications to optimize how memory is tracked by the library.
- To support some of the above changes the libpmemobj on-media layout had
  to be changed, which means that old pools have to be converted using
  pmdk-convert &gt;= 1.7.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1581595200">- Update to PMDK 1.8
  - Introduces new API in libpmemobj for user-assisted defragmentation
    (see pmemobj_defrag man page for details).
  - Introduces experimental support for PPC64LE architecture.
  - Introduces new flag in libpmemobj for opting-out of transaction aborts on failure
    (POBJ_TX_NO_ABORT), along with new variants of existing APIs that didn't accept
    flags (pmemobj_tx_xfree, pmemobj_tx_xpublish,
  - pmemobj_tx_xlock, pmemobj_tx_xlog_append_buffer, pmemobj_tx_xstrdup, pmemobj_tx_xwcsdup).
  - Moves out libvmem and libvmmalloc to the new repository (https://github.com/pmem/vmem).
  - obj: introduce new statistics useful for defrag
  - obj: introduce transient/persistent statistics enabling
  - obj: introduce pmemobj_tx_(set/get)_user_data funcs
  - obj: introduce pmemobj_(set/get)_user_data funcs
  - obj: disable workaround for offsetof() since VS 15.5 in public header
  - common: drop support for libndctl &lt; 63 on Linux
  - pool: rename -N --no-exec to -d --dry-run
- Add gen-doc.sh to pregenerate documentation in pregen-doc.tgz and avoid adding a
  build dependency to pandoc</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595419200">- Update to PMDK 1.9
  - Switches the default instruction set for memcpy, memmove and memset
    implementations on x86 to AVX512, and introduces numerous performance
    improvements for those operations on AVX and SSE2 fallback paths.
  - Optimizes transactional allocations in libpmemobj by avoiding one
    extraneous cache miss and reducing the amount of work required to perform
    a reservation.
  - Introduces a new API in libpmemobj, pmemobj_tx_set_failure_behavior,
    that enables the application to control the behavior of aborting
    transactions.
  - Stabilizes support for ppc64.
  - pmem: mem[cpy|set] optimization when eADR is available
  - obj: detect msync failures in non-pmem variants of mem[cpy|move|set]
- Add patches to fix compilation against libfabric:
  - examples-rpmem-add-missing-lfabric-flag.patch to fix examples linkage errors
  - common-fix-LIBFABRIC-flags.patch to fix daemons/tools linkage errors</changelog>
  <changelog author="christian.voegl@suse.com" date="1634558400">- Added pmdk-1.9-fix-missing-sfence.patch from commit
  55ec1b24ac89371e1dd0544a17662c738075041e to fix a data corruption on power
  failure (bsc#1191339)</changelog>
</package>
<package pkgid="f668b2000a79ee11a1e3a8e897cc18f7b43493852cffa572153df7f5a187eab1" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.34" rel="3.9.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500033600">- Add 0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Fix build on ARM</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500465600">- Drop png-version-info-only.patch, it has no effect after applying
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch
  Both patches achieve the same, prefer the upstream version</changelog>
  <changelog author="pgajdos@suse.com" date="1502107200">- update to 1.6.31:
  * Guard the definition of _POSIX_SOURCE in pngpriv.h.
  * Revised pngpriv.h to work around failure to compile
    arm/filter_neon.S.
  * Added "Requires: zlib" to libpng.pc.in.
  * Added special case for FreeBSD in arm/filter_neon.S.
  * Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent
    possible integer overflow.
  * Added eXIf chunk support.
- remove upstreamed
  0001-libpng16-Revised-pngpriv.h-to-use-PNG_VERSION_INFO_O.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1517140800">- update to 1.6.34:
  * Removed contrib/pngsuite/i*.png; some of these were incorrect
    and caused test failures.
- includes 1.6.33:
  * Added PNGMINUS_UNUSED macro to contrib/pngminus/p*.c and added
    missing parenthesis in contrib/pngminus/pnm2png.c
  * Fixed off-by-one error in png_do_check_palette_indexes()
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
    to fix shortlived oss-fuzz issue 3234.
  * Compute a larger limit on IDAT because some applications write
    a deflate buffer for each row
  * Use current date (DATE) instead of release-date (RDATE) in last
    changed date of contrib/oss-fuzz files.
  * Enabled ARM support in CMakeLists.txt
  * Fixed incorrect typecast of some arguments to png_malloc() and
    png_calloc() that were png_uint_32 instead of png_alloc_size_t
  * Use pnglibconf.h.prebuilt when building for ANDROID with cmake
  * Initialize memory allocated by png_inflate to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_set_text_2() due to truncated iTXt or zTXt
    chunk.
  * Initialize memory allocated by png_read_buffer to zero, using
    memset, to stop an oss-fuzz "use of uninitialized value"
    detection in png_icc_check_tag_table() due to truncated iCCP
    chunk.
  * Removed redundant tests
  * Added an interlaced version of each file in contrib/pngsuite.
  * Relocate new memset() call in pngrutil.c
  * Add support for loading images with associated alpha in the
    Simplified API
  * Revert contrib/oss-fuzz/libpng_read_fuzzer.cc to libpng-1.6.32
    state
  * Initialize png_handler.row_ptr in libpng_read_fuzzer.cc
  * Add end_info structure and png_read_end() to the libpng fuzzer
- includes 1.6.32:
  * Avoid possible NULL dereference in png_handle_eXIf when
    benign_errors are allowed. Avoid leaking the input buffer
    "eXIf_buf".
  * Eliminated png_ptr-&gt;num_exif member from pngstruct.h and added
    num_exif to arguments for png_get_eXIf() and png_set_eXIf().
  * Added calls to png_handle_eXIf(() in pngread.c and
    png_write_eXIf() in pngwrite.c, and made various other fixes
    to png_write_eXIf().
  * Changed name of png_get_eXIF and png_set_eXIf() to
    png_get_eXIf_1() and png_set_eXIf_1(), respectively, to avoid
    breaking API compatibility with libpng-1.6.31.
  * Updated contrib/libtests/pngunknown.c with eXIf chunk.
  * Initialized btoa[] in pngstest.c
  * Stop memory leak when returning from png_handle_eXIf() with an
    error
  * Replaced local eXIf_buf with info_ptr-eXIf_buf in png_handle_eXIf().
  * Update libpng.3 and libpng-manual.txt about eXIf functions.
  * Restored png_get_eXIf() and png_set_eXIf() to maintain API
    compatability.
  * Removed png_get_eXIf_1() and png_set_eXIf_1().
  * Check length of all chunks except IDAT against user limit to
    fix an OSS-fuzz issue (Fixes CVE-2017-12652)
  * Check length of IDAT against maximum possible IDAT size,
    accounting for height, rowbytes, interlacing and zlib/deflate
    overhead.
  * Restored png_get_eXIf_1() and png_set_eXIf_1(), because
    strlen(eXIf_buf) does not work (the eXIf chunk data can
    contain zeroes).
  * Revised symlink creation, no longer using deprecated cmake
    LOCATION feature
  * Fixed five-byte error in the calculation of IDAT maximum
    possible size.
  * Moved chunk-length check into a png_check_chunk_length()
    private function
  * Moved bad pngs from tests to contrib/libtests/crashers
  * Moved testing of bad pngs into a separate
    tests/pngtest-badpngs script
  * Added the --xfail (expected FAIL) option to pngtest.c. It
    writes XFAIL in the output but PASS for the libpng test.
  * Require cmake-3.0.2 in CMakeLists.txt
  * Fix "const" declaration info_ptr argument to png_get_eXIf_1()
    and the num_exif argument to png_get_eXIf_1()
  * Added "eXIf" to "chunks_to_ignore[]" in png_set_keep_unknown_chunks().
  * Added huge_IDAT.png and empty_ancillary_chunks.png to
    testpngs/crashers.
  * Make pngtest --strict, --relax, --xfail options imply -m
    (multiple).
  * Removed unused chunk_name parameter from png_check_chunk_length().
  * Relocated setting free_me for eXIf data, to stop an OSS-fuzz'
    leak.
  * Initialize profile_header[] in png_handle_iCCP() to fix
    OSS-fuzz issue.
  * Initialize png_ptr-&gt;row_buf[0] to 255 in png_read_row() to fix
    OSS-fuzz UMR.
  * Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
  * Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
    to account for the minimum 'deflate' stream, and relocate the
    test to a point after the keyword has been read.
  * Check that the eXIf chunk has at least 2 bytes and begins with
    "II" or "MM".
  * Added a set of "huge_xxxx_chunk.png" files to
    contrib/testpngs/crashers, one for each known chunk type, with
    length = 2GB-1.
  * Check for 0 return from png_get_rowbytes() and added some
    (size_t) typecasts in contrib/pngminus/*.c to stop some Coverity
    issues (162705, 162706, and 162707).
  * Renamed chunks in contrib/testpngs/crashers to avoid having
    files whose names differ only in case; this causes problems with
    some platforms
  * Added contrib/oss-fuzz directory which contains files used by
    the oss-fuzz project
- cleanup with spec-cleaner</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- removed obsoleted Obsoletes</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp
- usecase example: [bsc#1121624]</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- security update
- added patches
  CVE-2019-7317 [bsc#1124211]
  + libpng16-CVE-2019-7317.patch</changelog>
</package>
<package pkgid="82353d4ab4313668340c17ff73b50dd28a34ce6511d005da9d877c7c42e32bc3" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
</package>
<package pkgid="9858e52967d164b7d1cd702b4be35be6cab5dd633ae17e6ff3b7bd24c353e7fe" name="libpopt0" arch="x86_64">
  <version epoch="0" ver="1.16" rel="3.22"/>
  <changelog author="cfarrell@suse.com" date="1359115200">- license update: X11
  New spdx.org license list now contains an official entry for X11</changelog>
  <changelog author="dmueller@suse.com" date="1359979200">- Add config-guess-sub-update.patch:
  * Update config.guess/sub for AArch64</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1360584000">- popt wants __secure_getenv at configure time, but This
  function is no longer available as of glibc 2.17.
  test for secure_getenv() instead (popt-secure-getenv.patch)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1360756800">- Remove patches:
  - config-guess-sub-update.patch
  - popt-secure-getenv.patch
  run autoreconf instead .
- popt-libc-updates.patch replaces popt-secure-getenv.patch
  * test for secure_getenv instead of __secure_getenv
  * update configure.ac so it can be regenerated with modern
    autotools.
  * Internal symbols are already hidden with a linker script,
  improve that by hidding symbols with the compiler too.
  * use strerror_r instead of strerror in the library.</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1371211200">- fix popt-libc-updates.patch to work also with automake 1.13</changelog>
  <changelog author="jengelh@inai.de" date="1373198400">- Fix typo in popt-libc-updates.patch that prevented it to work
  with glibc before 2.17.
- More robust make install call; remove redundant %clean section</changelog>
  <changelog author="schwab@suse.de" date="1381147200">- popt-alignment-checks.patch: fix alignment checks</changelog>
  <changelog author="jengelh@inai.de" date="1502193600">- Remove --with-pic which is only for static libs.
- Fix RPM groups.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="6fa2fa04b19f988a11eb692457d4dfadba771c1b3d300ad39d13e145355d1047" name="libprocps7" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="7.22.1"/>
  <changelog author="jengelh@inai.de" date="1522929600">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
</package>
<package pkgid="1a3af5448ea16dfbf4862c0c384d2867faef65def49659f6bd0f23ffb99159cc" name="libprotobuf-lite20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="4.9.1"/>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
</package>
<package pkgid="04c4568471f451a24e367c49c2dca5c3a3767a5b4d2860689c31ee2edeb7481e" name="libproxy1" arch="x86_64">
  <version epoch="0" ver="0.4.15" rel="12.41"/>
  <changelog author="dimstar@opensuse.org" date="1494504000">- Update to version 0.4.15:
  + Port to, and require, SpiderMonkey 38.
  + Fix "NetworkManager plugin not being built"
    (gh#libproxy/libproxy#53).
  + Fix "networkmanager plugin not working
    (gh#libproxy/libproxy#58).
  + Fix "Invalid read after free" (gh#libproxy/libproxy#59).
  + Fix intermittent unit test failures.
- Replace pkgconfig(mozjs185) buildRequires with
  pkgconfig(mozjs-38), following upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504785600">- Update descriptions and RPM categories.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530964800">- Drop favor_gtk2 conditional.</changelog>
  <changelog author="dimstar@opensuse.org" date="1538740800">- Update Url tag to point to http://libproxy.github.io/libproxy/
- Add libproxy-python3.7.patch: Support python 3.7 and 3.8.
- Drop py_requires: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1544616000">- Convert package from multispec to multibuild.</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Remove few SLE11 conditions
- Fix build without python2 available</changelog>
  <changelog author="dimstar@opensuse.org" date="1587988800">- Add libproxy-pxgsettings.patch: pxgsettings: use the correct
  syntax to connect to the changed signal.</changelog>
  <changelog author="yfjiang@suse.com" date="1600084800">- Build with KDE on Tumbleweed, Leap and SLE releases greater than
  SLE-15-SP2 (jsc#SLE-12256).</changelog>
  <changelog author="mgorse@suse.com" date="1601467200">- Add libproxy-CVE-2020-25219.patch: Rewrite url::recvline to be
  nonrecursive (boo#1176410 CVE-2020-25219).
- Add libproxy-fix-pac-buffer-overflow.patch: fix buffer overflow
  when PAC is enabled (boo#1177143 CVE-2020-26154).</changelog>
</package>
<package pkgid="ff6bfbf67132a8732fb6b581df387fffbbc7f78a641082171e8eb7da7f0e9040" name="libpsl5" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="1.20"/>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
</package>
<package pkgid="8e46922072518d7e9c49122bb30b1d9059c29b76189d601c662bd43b9f7188ac" name="libpwquality1" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="3.3.2"/>
  <changelog author="mpluskal@suse.com" date="1510228800">- Build python3 version of bindings as well</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Switch url to https://github.com/libpwquality/libpwquality/
- Update to release 1.4.0:
  * Fix possible buffer overflow with data from /dev/urandom
    in pwquality_generate().
  * Do not try to check presence of too short username in password.
    (thanks to Nikos Mavrogiannopoulos)
  * Make the user name check optional (via usercheck option).
  * Add an 'enforcing' option to make the checks to be warning-only
    in PAM.
  * The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical.
  * Updated translations from Zanata.
- Add patch libpwquality-pythons.patch to avoid duping pythondir
- Make python3 default and enable py2 only when needed</changelog>
  <changelog author="jengelh@inai.de" date="1515412801">- Update RPM groups and summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568894401">- Update to version 1.4.1:
  + Minor bugfix update of the library.
- Drop libpwquality-pythons.patch: Fixed upstream. Following this,
  drop autoconf, automake and libtool BuildRequires and autoreconf
  call.
- Use modern macros.</changelog>
  <changelog author="kukuk@suse.com" date="1588334400">- Add baselibs.conf</changelog>
  <changelog author="fvogt@suse.com" date="1589803200">- Register with pam-config in %post(un)</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- update to 1.4.2:
  * Fix regression in handling retry, enforce_for_root, and
    local_users_only options introduced with the previous
    release.</changelog>
  <changelog author="dsauer@suse.com" date="1602849600">- update to 1.4.4
  * e11f2bd Fix regression with enabling cracklib check
  * 02e6728 Use make macros in rpm spec file
  * xxxxxxx Translated using Weblate (Polish, Turkish, Ukrainian)
- update to 1.4.3
  * 1213d33 Update translation files
  * a951fbe Add --disable-cracklib-check configure parameter
  * 6a8845b fixup static compilation
  * 92c6066 python: Add missing getters/setters for newly added settings
  * bfef79d Add usersubstr check
  * 09a2e65 pam_pwquality: Add debug message for the local_users_only option
  * a6f7705 Fix some gcc warnings
  * 8c8a260 pwmake: Properly validate the bits parameter.
  * 7be4797 we use Fedora Weblate now
  * xxxxxxx Translated using Weblate (Azerbaijani, Bulgarian,
    Chinese (Simplified), Czech, French, Friulian, Hungarian, Italian,
    Japanese, Norwegian Bokmål, Persian, Russian, Spanish, Turkish)</changelog>
</package>
<package pkgid="5dad790be4b1dcb1707bb02d9298504cea899a9c3dd264d17eed00662f8d0105" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="10.15.1"/>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
</package>
<package pkgid="9ff7b1c30e65e29fe8d0d5f9b045b6b7372a61e56fcf44211db367135607ab81" name="libqrencode4" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="1.17"/>
  <changelog author="fcrozat@suse.com" date="1350388800">- Remove buildrequires on libSDL-devel, only required when running
  autoreconf, which is not needed at all now.</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1352376000">- Update to 3.4.1
  * A bug that mutual exclusion was not performed has been fixed
  * Colored QR Code support
  * SVG, UTF8, and ANSIUTF8 output supports have been added to the command line tool.</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353844800">- Fix the SLES build:
  * Replace 'pkgconfig(libpng)'
  * Replace %make_install
  * BuildRequires: pkg-config</changelog>
  <changelog author="pgajdos@suse.com" date="1360929600">- build also against libpng16
  * libpng16.patch</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1374840000">- Update to 3.4.2:
  * Memory leak bug has been fixed.
  * Micro QR Code encoding bug has been fixed.
  * String splitting has been improved.
- Removed qrencode-libpng16.patch (fixed upstream).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1384603200">- Update to 3.4.3:
  * New option "--rle" has been added to the command line tool.
  * Bug fixes in the library and command line tool.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf, needed for kdebase4-workspace-libs-32bit</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1412337600">- Update to 3.4.4
  * Bugfix release. See the changelog file for the list of changes.
  * New option "--verbose" has been added to the command line tool.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to github as an url so people can see the progress
  * web is not really up-to-date
- Remove compat support for sle11</changelog>
  <changelog author="christophe@krop.fr" date="1516795200">- Update to 4.0.0
  * EPS output now supports foreground and background color
  * XPM and PNG32 support added
  * CMake support added
  * Various bugs and performance fixes
- Add qrencode-fix-installation.patch. Fixes installation for x86_64
  targets.</changelog>
</package>
<package pkgid="468ab9cfe8fb462ca2a16cdd586032d04d405cf4c1369e755cf057e6a1f67e17" name="librados2" arch="x86_64">
  <version epoch="0" ver="15.2.15.83+gf72054fa653" rel="3.34.1"/>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="ncutler@suse.com" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="ncutler@suse.com" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="ncutler@suse.com" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="ncutler@suse.com" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
  <changelog author="ncutler@suse.com" date="1631620800">- Update to 15.2.14-86-g25f8e6a7abf:
  + (jsc#SES-704) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
    (fixes an issue caused by downstream commit "pybing/mgr/mgr_module: allow
    keyword arguments")</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 15.2.15-83-gf72054fa653:
  + rebase on top of Ceph v15.2.15 tag
    https://ceph.io/releases/v15-2-15-octopus-released/
  + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
  + re-do some downstream patches
  * patches dropped:
    "cephadm: use full qualified image names for cephadm"
    "Switch to CaaSP v4.5 container images"
    "cephadm: Update Grafana container image from 7.0.3"
  * replaced by:
    "cephadm: downstream-ify default container image paths"</changelog>
</package>
<package pkgid="48852052d17fe9347281a1828f60d62d507dbf77cc34127846c25d51063b330c" name="librbd1" arch="x86_64">
  <version epoch="0" ver="15.2.15.83+gf72054fa653" rel="3.34.1"/>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="ncutler@suse.com" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="ncutler@suse.com" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="ncutler@suse.com" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="ncutler@suse.com" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
  <changelog author="ncutler@suse.com" date="1631620800">- Update to 15.2.14-86-g25f8e6a7abf:
  + (jsc#SES-704) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
    (fixes an issue caused by downstream commit "pybing/mgr/mgr_module: allow
    keyword arguments")</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 15.2.15-83-gf72054fa653:
  + rebase on top of Ceph v15.2.15 tag
    https://ceph.io/releases/v15-2-15-octopus-released/
  + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
  + re-do some downstream patches
  * patches dropped:
    "cephadm: use full qualified image names for cephadm"
    "Switch to CaaSP v4.5 container images"
    "cephadm: Update Grafana container image from 7.0.3"
  * replaced by:
    "cephadm: downstream-ify default container image paths"</changelog>
</package>
<package pkgid="2a434a65c859ce75efd7b7e31fa9d5b4033b97310e156bd2cca7baa133867294" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="67eec078e1033209cbe6773f8c36858f446069ba6a2a27d4d1a187b9c1c56d83" name="libreadline7" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.6.1"/>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
</package>
<package pkgid="f28f1f160c1937df1b703ab80fb9e404dbf1167938ed537c2b009ef2b6f381a1" name="libref_array1" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1331467200">- Update to new upstream release 0.1.3
  * Fixes a serious bug in libdhash with very large (&gt;1024 slots)
  initial size</changelog>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 0.3.0.1
  * A new libini_config interface (merging config section,
  better handling of metadata)
- Optional signature verification
- Add 0001-build-add-missing-Requires-to-pkgconfig-file.patch
  for corrected pkgconfig dependencies</changelog>
  <changelog author="ckornacker@suse.com" date="1391774400">- remove pkgconfig-deps.diff since it's obsoleted by
  0001-build-add-missing-Requires-to-pkgconfig-file.patch</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 0.4.0
  * libini_config: Ability to convert input INI file from UTF-16/32
  to UTF8- during parsing
  * ini_config: Support C style comments in INI file
  * ini_config: Ability to read configuration data from a memory buffer
- Remove doxygen-notimestamp.diff,
  0001-build-add-missing-Requires-to-pkgconfig-file.patch
  (merged upstream)</changelog>
  <changelog author="hguo@suse.com" date="1455105600">- Upgrade to latest upstream version 0.5.0.
  The new version is ABI compatible with 0.4.0.
  * libini_config: This release adds an API to create, modify and
  save INI files
  * libini_config: Merging configuration snippets installed in
  different locations is supported
  * libcollection: New functions: col_get_dup_item,
  col_delete_item_with_cb, col_remove_item_with_cb</changelog>
  <changelog author="hguo@suse.com" date="1455278400">- Correct the version number of library packages in spec file.</changelog>
  <changelog author="jengelh@inai.de" date="1456315200">- Bump subpackage version numbers to match .pc files</changelog>
  <changelog author="hguo@suse.com" date="1469793600">- Introduce patch 0001-increase-ini-max-value-length.patch
  to support longer values in INI file parser. bsc#989488</changelog>
  <changelog author="jengelh@inai.de" date="1484568000">- Update to new upstream release 0.6.0
  * libini now supports validators that check for well-formed INI
  files.</changelog>
  <changelog author="scabrero@suse.de" date="1573128000">- Update to 0.6.1 from 0.6.0 (jsc#ECO-248):
  * libini now supports validators that check for well-formed INI
    files.
- Update URL
  * Remove the git link info as it 404 atm
- Add patches from upstream to fix ini behaviour:
  * INI-Fix-detection-of-error-messages.patch
  * INI-Silence-ini_augment-match-failures.patch
  * TEST-validators_ut_check-Fix-fail-with-new-glibc.patch
- Add patch fixing errors writeout to stdout:
  * INI-Remove-definiton-of-TRACE_LEVEL.patch</changelog>
</package>
<package pkgid="ab01cd78b2950e7396e5a0c17be7e7cd65571060b716a0be73a83de699ad4cce" name="libreiserfscore0" arch="x86_64">
  <version epoch="0" ver="3.6.27" rel="2.24"/>
  <changelog author="jeffm@suse.com" date="1379332800">- silent-rules.patch: Add workaround for missing AM_SILENT_RULES</changelog>
  <changelog author="jeffm@suse.com" date="1379419200">- Update to upstream master (57eac84)
  - reiserfsprogs: add helpers for constant endian routines</changelog>
  <changelog author="jeffm@suse.com" date="1383739200">- debugreiserfs-fix-use-after-free-while-closing-log:
  debugreiserfs: fix use after free while closing log (bnc#849264).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1427112000">- Use -fgnu89-inline, fixes build with gcc5.</changelog>
  <changelog author="jeffm@suse.com" date="1465214400">- Update to 3.6.25
  - reiserfsprogs: use com_err in reiserfs_open
  - reiserfscore: fix "new_insert_key may be used uninitialized..."
  - reiserfsprogs: fix issues with inline functions
  - man: Fixes a little glitch in the man page.
  - manpages: escape dashes
  - fsck: remove namesys.com reference in error text
  - reiserfscore: constify struct pointer arguments
  - reiserfscore: constify strings
  - reiserfslib: add basic extended attribute helpers
  - reiserfslib: add file data and directory iterators
  - mkreiserfs: move block_size_ok out of reiserfscore
  - debugreiserfs: fix incorrect memset size in unpack_stat_data
  - reiserfsprogs: remove dead code
  - debugreiserfs: fix use after free while closing log
  - reiserfsprogs: add helpers for constant endian routines
  - Removed patch debugreiserfs-fix-use-after-free-while-closing-log</changelog>
  <changelog author="jeffm@suse.com" date="1498132800">- Update to 3.6.26
  - Fixes a NULL pointer dereference caused by reiserfsck.
  - build: libcom_err is required
  - reiserfscore: add reiserfs_err.et to EXTRA_DIST</changelog>
  <changelog author="jeffm@suse.com" date="1500984000">- Update to 3.6.27
  - build: use @PACKAGE_VERSION@ instead of @REISERFSCORE_VERSION@ in .pc file
  - xattrs: handle both hash forms in reiserfs_check_xattr
  - misc: include &lt;sys/sysmacros.h&gt;
- reiserfs package now depends on libreiserfscore0</changelog>
  <changelog author="jeffm@suse.com" date="1500984001">- Update with respun 3.6.27.</changelog>
  <changelog author="jeffm@suse.com" date="1511352000">- Add conflicts for libreiserfscore0 and earlier reiserfs package (bsc#1071088).</changelog>
  <changelog author="jeffm@suse.com" date="1511956800">- Added COPYING to %doc</changelog>
</package>
<package pkgid="6ab5a8ed37b4f853a480e46df814f835cf4748512238fac3d325cccabbbd5888" name="librest-0_7-0" arch="x86_64">
  <version epoch="0" ver="0.8.1" rel="1.29"/>
  <changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 0.7.90:
  + Allow to disable libsoup strict SSL check
  + Add username/password support
  + Several API additions
  + Build fixes
  + Fix some leaks.</changelog>
  <changelog author="dimstar@opensuse.org" date="1373544000">- Add librest-fix-build-without-ca-certificates.patch: Fix build
  with configure --without-ca-certificates.
- Pass --without-ca-certificates to configure instead of
  - -with-ca-certificates=/etc/ssl/ca-bundle.pem (bnc#825903).</changelog>
  <changelog author="dimstar@opensuse.org" date="1377691200">- Drop librest-fix-build-without-ca-certificates.patch: as
  identified in bnc#825903, this is not sufficient and needs more
  investigation / rewriting.
- Revert --without-ca-certificates configure option back to
  - -with-ca-certificates=/etc/ssl/ca-bundle.pem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1394452800">- Update to version 0.7.91:
  + Bugs fixed: bgo#702483, bgo#703103, bgo#703642, bgo#712231,
    bgo#712747.</changelog>
  <changelog author="dimstar@opensuse.org" date="1410177600">- Update to version 0.7.92:
  + Bugs fixed: bgo#665716, bgo#708358, bgo#708359, bgo#728340,
    bgo#728952, bgo#728953, bgo#735919, bgo#735920, bgo#735921,
    bgo#735922.
- Add librest-missing-include.patch: Add missing includes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.7.93:
  + oauth: Add missing include.
  + xml-parser: Add missing break in switch statement.
  + Don't dump XML parsing errors to stderr/stdout by default.
  + Fix misc bugs in tests.
- Drop librest-missing-include.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460980800">- Update to version 0.8.0:
  + build-sys: Set version to 0.8.0.
  + tests: Fix lastfm test.
  + tests/proxy-continuous:
  - Simplify the code.
  - Server chunks can be different from client ones.
  + oauth: Don't leak temp data in steal_oauth_params.
  + rest-xml-parser: Ignore text content at the top-level of a
    document.
  + rest-proxy-auth: Add rest_proxy_auth_cancel for cancelling
    authentication.</changelog>
  <changelog author="mgorse@suse.com" date="1462536000">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="jengelh@inai.de" date="1493121600">- Use librest-0_7-0 as shared library name, similar to how it is
  done for libmwaw-0_3.
- Drop redundant %clean section; use %_smp_mflags for parallel
  build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508414400">- Update to version 0.8.1:
  + RestProxy: Set the payload after _upload.
  + proxycall: remove double-assign to status_{code,message}.</changelog>
</package>
<package pkgid="3a92b5a19fdafc27043ae767fff93b5ca0b608a23c2ba645413b4da34abe5390" name="librsvg-2-2" arch="x86_64">
  <version epoch="0" ver="2.46.5" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1570449600">- Update to version 2.46.1:
  + Fix empty patterns which reference a fallback pattern with
    children.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571054400">- Update to version 2.46.2:
  + Patterns and gradients reused across more than one element will
    only get resolved once now; this should make things marginally
    faster for patterns or gradients with fallbacks.
  + glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
    loaded XML elements, and the number of referenced elements
    within an SVG document. This is to mitigate malicious SVGs
    which try to consume all memory, and those which try to consume
    an exponential amount of CPU time.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 2.46.3:
  + glgo#GNOME/librsvg#516: Fix inadvertent bump in the minimum
    Rust version required. The string_cache crate is now pinned to
    a version that still works on Rust 1.34.
  + glgo#GNOME/librsvg#521: Compute geometries correctly if there
    is a viewBox attribute.
  + glgo#GNOME/librsvg#308: Fix stack exhaustion with circular
    references in &lt;use&gt; elements.
  + Consistently use the LGPL 2.1 wherever it is mentioned.
- Drop COPYING, everything is covered by COPYING.LIB now.</changelog>
  <changelog author="yfjiang@suse.com" date="1573041600">- Remove BuildRequires rust-std. The replacement rust-std-static
  is already required by rust.</changelog>
  <changelog author="fvogt@suse.com" date="1573128000">- Add patches to fix coloring of symbolic icons (glgo#GNOME/librsvg#525):
  * 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  * 0002-Compute-the-specificity-of-CSS-selectors.patch
  * 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1573560000">- Fix incorrect obsoletes for rsvg-view.</changelog>
  <changelog author="yfjiang@suse.com" date="1573646400">- Add explicit conflicts between rsvg-convert and rsvg-view &lt;=2.45.7.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574683200">- Update to version 2.46.4:
  + Panic when reading an invalid stylesheet URL in an XML
    processing instruction.
  + Consider specificity when applying CSS selector matches.
  + Provide an usage example in the librsvg crate docs.
- Drop patches fixed upstream:
  + 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  + 0002-Compute-the-specificity-of-CSS-selectors.patch
  + 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1635163200">- Bump required rust version to rust-1.53, in order to avoid a ppc64le crash (bsc#1189304, bsc#1191114)</changelog>
</package>
<package pkgid="90995e5752dcf02751bb368ca8c8bd6632764e9fafa102aafa24f57ec2751bb0" name="libsasl2-3" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="150300.4.6.1"/>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don?t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="varkoly@suse.com" date="1645444800">- CVE-2022-24407: cyrus-sasl: SQL injection in sql_auxprop_store
  in plugins/sql.c (bsc#1196036)
  o add upstream patch:
    0001-CVE-2022-24407-Escape-password-for-SQL-insert-update.patch</changelog>
</package>
<package pkgid="19b5ed941039c211e99330edc420c5ddbb689b4d66ef7314ff86c63ec1e19363" name="libscg1_0" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="4.6.1"/>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="adb1778b23b604a8977f67204822dbaba5d43b6ffc7e72523ad1af379dd5e66c" name="libschily1_0" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="4.6.1"/>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="41f5b76f22901f8a8f009d4881c9ec8dbe1caba278abc391dad3524909a5452e" name="libseccomp2" arch="x86_64">
  <version epoch="0" ver="2.5.3" rel="150300.10.8.1"/>
  <changelog author="rhafer@suse.com" date="1599566400">- Update to release 2.5.0
  * Add support for the seccomp user notifications, see the
    seccomp_notify_alloc(3), seccomp_notify_receive(3),
    seccomp_notify_respond(3) manpages for more information
  * Add support for new filter optimization approaches, including a balanced
    tree optimization, see the SCMP_FLTATR_CTL_OPTIMIZE filter attribute for
    more information
  * Add support for the 64-bit RISC-V architecture
  * Performance improvements when adding new rules to a filter thanks to the
    use of internal shadow transactions and improved syscall lookup tables
  * Properly document the libseccomp API return values and include them in the
    stable API promise
  * Improvements to the s390 and s390x multiplexed syscall handling
  * Multiple fixes and improvements to the libseccomp manpages
  * Moved from manually maintained syscall tables to an automatically generated
    syscall table in CSV format
  * Update the syscall tables to Linux v5.8.0-rc5
  * Python bindings and build now default to Python 3.x
  * Improvements to the tests have boosted code coverage to over 93%
- libseccomp.keyring: replaced by Paul Moore &lt;pmoore@redhat.com&gt; key.</changelog>
  <changelog author="schwab@suse.de" date="1599566401">- testsuite-riscv64-missing-syscalls.patch: Fix testsuite failure on
  riscv64
- Ignore failure of tests/52-basic-load on qemu linux-user emulation</changelog>
  <changelog author="dimstar@opensuse.org" date="1599652800">- Do not rely on gperf: pass GPERF=/bin/true to configure and
  remove gperf BuildRequires. The syscalls.perf file it would
  generate is part of the tarball already.</changelog>
  <changelog author="dmueller@suse.com" date="1605960000">- update to 2.5.1:
  * Fix a bug where seccomp_load() could only be called once
  * Change the notification fd handling to only request a notification fd if
  * the filter has a _NOTIFY action
  * Add documentation about SCMP_ACT_NOTIFY to the seccomp_add_rule(3) manpage
  * Clarify the maintainers' GPG keys
- remove testsuite-riscv64-missing-syscalls.patch</changelog>
  <changelog author="jengelh@inai.de" date="1630497600">- Update to release 2.5.2
  * Update the syscall table for Linux v5.14-rc7
  * Add a function, get_notify_fd(), to the Python bindings to
    get the nofication file descriptor.
  * Consolidate multiplexed syscall handling for all
    architectures into one location.
  * Add multiplexed syscall support to PPC and MIPS
  * The meaning of SECCOMP_IOCTL_NOTIF_ID_VALID changed within
    the kernel. libseccomp's fd notification logic was modified
    to support the kernel's previous and new usage of
    SECCOMP_IOCTL_NOTIF_ID_VALID.</changelog>
  <changelog author="schwab@suse.de" date="1631534400">- Skip 11-basic-basic_errors test on qemu linux-user emulation</changelog>
  <changelog author="jengelh@inai.de" date="1636286400">- Update to release 2.5.3
  * Update the syscall table for Linux v5.15
  * Fix issues with multiplexed syscalls on mipsel introduced in v2.5.2
  * Document that seccomp_rule_add() may return -EACCES</changelog>
  <changelog author="mrueckert@suse.de" date="1638446400">- reenable python bindings at least for the distro default python3
  package:
  - adds make-python-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1642420800">- buildrequire python-rpm-macros</changelog>
  <changelog author="meissner@suse.com" date="1646654400">- check if we have NR_openat2, avoid using its definition when not
  (bsc#1196825)
  Added seccomp-openat2.patch</changelog>
</package>
<package pkgid="ffc09ea91af95b1d3c9870ef1a24dc2d9b2850a3760fdd861f6e91f67c24556a" name="libselinux1" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.5.14"/>
  <changelog author="jsegitz@suse.com" date="1539777600">- Update to version 2.8 (bsc#1111732)
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files</changelog>
  <changelog author="jsegitz@suse.com" date="1546603200">- Remove unneeded build requires for python3 (bsc#1120255)</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add security_reject_unknown(3) man page
  * Change matchpathcon usage to match with matchpathcon manpage
  * Do not define gettid() if glibc &gt;= 2.30 is used
  * Fix RESOURCE_LEAK defects reported by coverity scan
  * Fix line wrapping in selabel_file.5
  * Do not dereference symlink with statfs in selinux_restorecon
  * Fix overly strict validation of file_contexts.bin
  * Fix selinux_restorecon() on non-SELinux hosts
  * Fix the whatis line for the selinux_boolean_sub.3 manpage
  * Fix printf format string specifier for uint64_t
  * Fix handling of unknown classes/perms
  * Set an appropriate errno in booleans.c
- Dropped python3.patch, is now upstream</changelog>
  <changelog author="mliska@suse.cz" date="1556193600">- Disable LTO (boo#1133244).</changelog>
  <changelog author="jsegitz@suse.com" date="1558699200">- Set License: to correct value (bsc#1135710)</changelog>
  <changelog author="jsegitz@suse.com" date="1559563200">- In selinux-ready
  * Removed check for selinux-policy package as we don't ship one
    (bsc#1136845)
  * Add check that restorecond is installed and enabled</changelog>
  <changelog author="jsegitz@suse.de" date="1573646400">- Added Use-Python-distutils-to-install-SELinux.patch to use
  Python's distutils instead of building and installing python
  bindings manually</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"
  Dropped Use-Python-distutils-to-install-SELinux.patch, included
  upstream</changelog>
  <changelog author="jsegitz@suse.de" date="1585224000">- Added skip_cycles.patch to skip directory cycles and not error
  out</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated</changelog>
</package>
<package pkgid="afb737ff91ef60048a748ea5b62f3a8d6c7993ce46f403aa0241868790507b3e" name="libsemanage1" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.4.12"/>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Always set errno to 0 before calling getpwent()
  * Include user name in ROLE_REMOVE audit events
  * genhomedircon - improve handling large groups
  * improve semanage_migrate_store import failure
  * reset umask before creating directories
  * set selinux policy root around calls to selinux_boolean_sub
  * use previous seuser when getting the previous name</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138812).</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch</changelog>
  <changelog author="jsegitz@suse.de" date="1590753600">- Apply suse_path.patch only for older distributions. Newer
  use libexec</changelog>
  <changelog author="dimstar@opensuse.org" date="1591272000">- Drop suse_path.patch: replace it with a grep/sed logic replacing
  /usr/libexec in all files with the correct value for all distros
  (taking into account that openSUSE is in progress of migrating
  from /usr/lib to /usr/libexec).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591963200">- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1592308800">- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Improved manpage
  * fsync final files before rename</changelog>
  <changelog author="jsegitz@suse.com" date="1594814400">- Remove libsemanage-update-map-file.patch to prevent checkers from declining
  the submission. Keeping the snippet in the spec file in case we try to
  enable LTO again</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Add /var/lib/selinux</changelog>
</package>
<package pkgid="81aefd817619696b47550546fa7c301375fb6f935cf331734c82f3d38f801a0d" name="libsensors4" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="4.6.1"/>
  <changelog author="jdelvare@suse.com" date="1454241600">- lm_sensors-3.4.0-sensord-service-extra-args.patch: Allow passing
  arbitrary extra arguments to sensord.</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1472817600">- add lm_sensors-3.4.0-sensors-detect-add-ftsteutates-support.patch
  for ftsteutates support (Fujitsu Skylake boards)</changelog>
  <changelog author="jdelvare@suse.com" date="1475668800">- lm_sensors-3.4.0-sensors-detect-ppc64le.patch: Fix sensors-detect
  CPU detection support on ppc architectures (bsc#999987)</changelog>
  <changelog author="jdelvare@suse.com" date="1480507200">- lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch: Skip
  "random" I/O port probing on non-x86 machines (bsc#1008552)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="hillwood@opensuse.org" date="1526299200">- Update version to 3.4.0git20180510.1c48b19, use git version
  * Support many new hardware:
    + Add detection of Fintek F81768
    + Only probe I/O ports on x86
    + Add detection of Nuvoton NCT6793D
    + Add detection of Microchip MCP9808
    + Mark F71868A as supported by the f71882fg driver
    + Mark F81768D as supported by the f71882fg driver
    + Mark F81866D as supported by the f71882fg driver
    + Add detection of various ITE chips
    + Add detection of Nuvoton NCT6795D
    + Add detection of DDR4 SPD
    + Add detection of ITE IT8987D
    + Add detection of AMD Family 17h temperature sensors
    + Add detection of AMD KERNCZ SMBus controller
    + Add detection of various Intel SMBus controllers
    + Add detection of Giantec GT30TS00
    + Add detection of ONS CAT34TS02C and CAT34TS04
    + Add detection of AMD Family 15h Model 60+ temperature sensors
    + Add detection of Nuvoton NCT6796D
    + Add detection of AMD Family 15h Model 70+ temperature sensors
  * Fix syntax errors
  * Fix systemd paths
- Drop lm_sensors-3.4.0-sensors-detect-fix-systemd-path.patch
  Upstream merge this patch
- Drop lm_sensors-3.4.0+-Only-probe-I-O-ports-on-x86.patch
  Upstream merge this patch
- Change upstream url.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1543060800">- Update to version 3.5.0:
  + soname was bumped due to commit dcf2367 which introduced an
    ABI change.
  + Fixed disappearance of certain hwmon chips with 4.19+ kernels,
    (gh#lm-sensors/lm-sensors#139, boo#1116021).
  + Add the find-driver script for debugging.
  + Various documentation and man page improvements.
  + Fix various issues found by Coverity Scan.
  + Fix compilation with the musl C library.
  + Updated links in documentation to reflect the new home of
    lm_sensors.
  + sensors.1: Add reference to sensors-detect and document -j
    option (json output).
  + sensors: Add support for json output, add support for power
    min, lcrit, min_alarm, lcrit_alarm.
  + sensors-detect:
  * Fix systemd paths.
  * Add detection of Fintek F81768.
  * Only probe I/O ports on x86.
  * Add detection of Nuvoton NCT6793D.
  * Add detection of Microchip MCP9808.
  * Mark F71868A as supported by the f71882fg driver.
  * Mark F81768D as supported by the f71882fg driver.
  * Mark F81866D as supported by the f71882fg driver.
  * Add detection of various ITE chips.
  * Add detection of Nuvoton NCT6795D.
  * Add detection of DDR4 SPD.
  * Add detection of ITE IT8987D.
  * Add detection of AMD Family 17h temperature sensors.
  * Add detection of AMD KERNCZ SMBus controller.
  * Add detection of various Intel SMBus controllers.
  * Add detection of Giantec GT30TS00.
  * Add detection of ONS CAT34TS02C and CAT34TS04.
  * Add detection of AMD Family 15h Model 60+ temperature
    sensors.
  * Add detection of Nuvoton NCT6796D.
  * Add detection of AMD Family 15h Model 70+ temperature
    sensors.
  + configs: Add sample configuration files.
  + sensors.conf.default:
  * Add hardwired inputs of NCT6795D
  * Add hardwired inputs of F71868A
  * Add hardwired NCT6796D inputs
  + vt1211_pwm: replaced deprecated sub shell syntax, run with
    bash instead of sh.
  + pwmconfig: replaced deprecated sub shell syntax.
  + fancontrol: replaced deprecated sub shell syntax, save
    original pwm values.
  + fancontrol.8: replaced deprecated sub shell syntax.
  + libsensors:
  * Add support for SENSORS_BUS_TYPE_SCSI, add support
    for power min, lcrit, min_alarm, lcrit_alarm.
  * Handle hwmon device with thermal device parent (bsc#1108468).
- Rebase lm_sensors-3.0.3-hint-at-kernel-extra-package.patch for
  new release.
- Spec file tidy up for man page extension.</changelog>
  <changelog author="jdelvare@suse.com" date="1544961600">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo excessive
  libsensors version bump.</changelog>
  <changelog author="jdelvare@suse.com" date="1545220800">- lm_sensors-3.5.0-libsensors-fix-soname.patch: Undo the
  SENSORS_API_VERSION change, to stay source-compatible with
  upstream.</changelog>
  <changelog author="jdelvare@suse.com" date="1619784000">- change-pidfile-path-from-var-run-to-run.patch: Change PIDFile
  path from /var/run to /run (bsc#1185183).
- var-run-deprecated.patch: /var/run is deprecated (bsc#1185183).</changelog>
</package>
<package pkgid="7337807bc39483290339e884315754870e62949a0d32f424f0d6d22ce4e56af2" name="libsepol1" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.2.20"/>
  <changelog author="mcepl@suse.com" date="1526472000">- Rebase to 2.7
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1539777600">- Update to version 2.8 (bsc#1111732)
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1541678400">- Adjusted source urls (bsc#1115052)</changelog>
  <changelog author="jengelh@inai.de" date="1541678401">- Use more %make_install.</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add two new Xen initial SIDs
  * Check that initial sid indexes are within the valid range
  * Create policydb_sort_ocontexts()
  * Eliminate initial sid string definitions in module_to_cil.c
  * Rename kernel_to_common.c stack functions
  * add missing ibendport port validity check
  * destroy the copied va_list
  * do not call malloc with 0 byte
  * do not leak memory if list_prepend fails
  * do not use uninitialized value for low_value
  * fix endianity in ibpkey range checks
  * ibpkeys.c: fix printf format string specifiers for subnet_prefix
  * mark permissive types when loading a binary policy</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138813).</changelog>
  <changelog author="jsegitz@suse.de" date="1580385600">- Add fnocommon.patch to prevent build failures on gcc10 and
  remove_cil_mem_error_handler.patch to prevent build failures due to
  leftovers from the removal of cil_mem_error_handler (bsc#1160874)</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * cil: Allow validatetrans rules to be resolved
  * cil: Report disabling an optional block only at high verbose levels
  * cil: do not dereference perm_value_to_cil when it has not been allocated
  * cil: fix mlsconstrain segfault
  * Further improve binary policy optimization
  * Make an unknown permission an error in CIL
  * Remove cil_mem_error_handler() function pointer
  * Use LIBSEPOL_3.0 and fix sepol_policydb_optimize symbol mapping
  * Add a function to optimize kernel policy
  * Add ebitmap_for_each_set_bit macro
  Dropped fnocommon.patch as it's included upstream</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Enable -fcommon in order to fix boo#1160874.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Add support for new polcap genfs_seclabel_symlinks
  * Initialize the multiple_decls field of the cil db
  * Return error when identifier declared as both type and attribute
  * Write CIL default MLS rules on separate lines
  * Sort portcon rules consistently
  * Remove leftovers of cil_mem_error_handler
  * Drop remove_cil_mem_error_handler.patch, is included</changelog>
</package>
<package pkgid="599f473eb88faee836368ed7157138d20a6e859629aa66df824081f5951b0a8e" name="libsgutils2-1_43-2" arch="x86_64">
  <version epoch="0" ver="1.44~763+19.1ed0757" rel="9.3.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- Use separate repository for SLE15</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Spec file: add fc_wwpn_id to generate by-path links for
  fibrechannel (bsc#1005063)
- Update to version 1.44~763+17.35f525b:
  * Changed versioning scheme (svn r763, pre-release of
    upstream 1.44, plus 16 SUSE patches, SUSE git commit b2fedfa)
  * Code-identical to previous release except for the following:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 1.44~763+19.1ed0757:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
  (bsc#840054, bsc#1131482)</changelog>
</package>
<package pkgid="b188305152bcea39a3b2cc1b2bd13607f67416e8e77bbd8cb825231bb864dfe3" name="libsigc-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="1.18"/>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
</package>
<package pkgid="b99047fd930aee5e82a4497a5589de3ff182def3c17bf00f928f6a1614edd80f" name="libslirp0" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="1.51"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
</package>
<package pkgid="30cda6ac98b45dc2729d5b347be448422f88b32bd85d38f36036a18ae07e22aa" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="6bc33011431a80c454f47359879ff863e57c713c3996d332d7c64bb4373f2aa3" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="1.1"/>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
</package>
<package pkgid="302408ddea335b038dd9f19eedac9881699e6c720d2a329d597450cee1e08c1c" name="libsnappy1" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="6b3bb0b1e50dfad32a7d15c7280ad6be5b62beac757496816521b24228196ec9" name="libsodium23" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="4.3.18"/>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="4fda36a069ea74214904ddf5ab24df47965e7f04c28d479ac4ceda9f814d1719" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="bc2b4159023cfd58cf6cd3f023326efb69cdc82a4068edb9e3461eaf6d07262c" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="0cfe274b17daecc2b748a489496cb692e45b9000c74d370e6433dc4c6c052a44" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.20" rel="9.2"/>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
</package>
<package pkgid="58dcd371a2c968f94b3a13640ea4f68e13a567e2a17663a98e016f01b2ff6c62" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.68.3" rel="2.32"/>
  <changelog author="bjorn.lie@gmail.com" date="1558008000">- Update to version 2.66.2:
  + Make gettext optional (might not be available in Windows).
  + MSVC: set encoding to UTF-8 to avoid errors.
  + MinGW tests build fix.
  + Check for TLS support only when external glib dependency is
    available.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568203200">- Update to version 2.66.3:
  + docs: various gtk-doc fixes.
  + SoupServer: Fixes to Windows path handling.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="mgorse@suse.com" date="1568203201">- Update to version 2.67.92:
  + Silence GTimeVal deprecation warnings.
  + API documentation and annotation fixes.
  + Plug a couple of NTLM authentication memory leaks.
  + Meson: Use feature options.
  + Meson: Do not fallback to system krb5-config for
    cross-compilation.
  + NTLM: Fix build with NTLM enabled.
  + Updated translations.
- Changes from version 2.67.91:
  + HSTS: New API to retrieve information about existing HSTS
    policies.
  + Updated translations.
- Changes from version 2.67.90:
  + WebSockets: add support for WebSocket extensions via new
    SoupWebsocketExtensionManager and SoupWebsocketExtension API.
  + WebSockets: add support for the permessage-deflate extension,
    enabled by default in SoupServer and in the client side only if
    SoupWebsocketExtensionManager is added to a session.
  + WebSockets: Allow sending close frames with no body.
  + WebSockets: ignore messages after close has been sent and
    received.
  + Meson: tls-check improved.
  + Meson: improve Apache checks.
- Changes from version 2.67.3:
  + WebSockets: allow sending empty binary data.
  + WebSockets: fail and load the connection on invalid payload
    length.
  + WebSockets: allow NULL characters in text messages data.
  + WebSockets: Close connection on wrongly masked/unmasked frame
    as per RFC.
  + WebSockets: other code fixes.
  + NTLM: Fix NTLMv2 authentication.
  + SoupMessage: fix several deprecation warnings related to
    private data.
- Changes from version 2.67.2:
  + gobject-introspection: Fix annotation for soup_auth_new().
  + brotli: Do not advertise the decoder as it's failing with some
    websites.
  + Meson: Fix xml2 and sqlite fallbacks.
  + HSTS: Add SoupHSTSEnforcer:hsts-enforced signal.
  + HSTS: Fixes to the types used to store policies in the SQLite
    storage.
  + HSTS: Accept Strict-Transport-Security regardless of casing.
  + WebSockets: Ensure messages finishes when handshake fails.
  + WebSockets: Fix critical warnings and test failures.
- Changes from version 2.67.1:
  + Add a brotli decoder. This adds a new dependency on libbrotli.
  + Add strict secure cookies support.
  + Add HSTS enforcer SoupSession feature (with both memory and
    sqlite backends).
  + meson gtk-doc documentation fixes.
- Add libbrotlidec to BuildRequires.
- Adjust meson: need "enabled" rather than "true" in a few places.
- Add samba-winbind to BuildRequires: meson checks for ntlm_auth.
- Meson: doc option is now gtk_doc.
- Add libsoup-disable-hsts-tests.patch: these require *.localhost
  to resolve.</changelog>
  <changelog author="mgorse@suse.com" date="1568289600">- Update to version 2.68.1:
  + Several memory leaks fixed in tests, examples, and parsing
    code.
  + SoupServer: Fixes to Windows path handling.
  + Changes in version 2.68.0:
  + Updated translations.
  + Changes in version 2.67.93:
  + SoupMessage: Handle Transfer-Encoding: identity for
    compatibility reasons.
  + WebSockets: Only poll IO stream when needed.
  + WebSockets: Properly set cookies received during handshake.
  + WebSockets: Plug a couple of memory leaks and fix a few
    read-after-free memory errors.
  + WebSockets: document how web socket extensions should treat
    buffers in case of error.
  + SoupSession: Don't reset user GCancellable internally.
  + Tests: Make tests installable.
  + Remove deprecate GTimeVal internal usage.
  + CI: increase coverage by enabling all features during testing.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570622400">- Update to version 2.68.2:
  + Documentation fixes.
  + Windows compatibility test fixes.
  + WebSockets: client_max_window_bits in server must have a value.
  + build: improve diagnostics when detecting Apache.
  + NTLM: Make v2 authentication more robust.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571140800">- Disable NTLM for the time being (causes build cycle):
  + Drop samba-winbind BuildRequires.
  + Pass -Dntlm=disabled to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 2.68.3:
  + Fixes to testing infrastructure.
  + Enable GNOME support in mingw.
  + Allow introspection in cross builds.
  + Updated translations.</changelog>
  <changelog author="olaf@aepfle.de" date="1576843200">- meson &gt;=0.50 is required for building</changelog>
  <changelog author="olaf@aepfle.de" date="1578571200">- Usage of g_canonicalize_filename requires glib 2.58</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
</package>
<package pkgid="0b2009374bb7ccd3f84a9a7a3a35fc9bcd4978db7b985cca4d435e5933b595ec" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.14.3" rel="1.48"/>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="9+suse@cirno.systems" date="1578657600">- Enable video codec support (VPX and MJPEG)</changelog>
  <changelog author="brogers@suse.com" date="1582891200">- Update to v0.14.3 release
  The main changes are WebSocket and support for Windows.
  * Add support for WebSocket, this will allow to use spice-html5
    without proxy
  * Support Windows, now Qemu Windows can be build enabling Spice
  * Fix some alignment problem
  * Converted some documentation to Asciidoc format to make easier
    to update, updated some
  * Minor compatibility fix for PPC64EL and ARMHF
  * Minor fixes for big endian machines like MIPS
  * Avoid some crashes with some buggy guest drivers, simply
    ignore the invalid request
  * Fix for old OpenSSL versions
  * Minor fix for Windows clients and brushes, fixed an issue with
    Photoshop under Windows 7
  * Add ability to query video-codecs
  * Small use-after-free fix
  * Fix for debugging recording/replaying using QUIC images
  * Fix a regression where spice reported no monitors to the client
  * Fix DoS in spicevmc if WebDAV used
  * Updated and improved test migration script
  * Some minor fixes to smartcard support
  * Avoid possible disconnection using proxies using a in-flow
    keepalive mechanism
- The NEWS file is now named CHANGELOG.md, and the previously
  provided ChangeLog, which was a summary of the git log is no
  longer provided</changelog>
  <changelog author="brogers@suse.com" date="1583755200">- Clean up some spec file conditionals that are no longer helpful</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vunerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="brogers@suse.com" date="1602244800">- Note: The Mar 9, 2020 spec file cleanup and the following change
  satisfy jsc#SLE-15520
- Remove gstreamer-plugins-libav and gstreamer-plugins-good as
  BuildRequires. Even though the configure step of the package
  build does report detection of features from these packages, the
  build is actually not otherwise influenced by the presence of
  these packages. It is at runtime when these plugin packages are
  utilized, so leave the Recommends for these in the package spec,
  so that if the packages are available in a distro they can get
  installed and utilized.</changelog>
</package>
<package pkgid="d148e018bf314d9840c3e859f18a04321a6fe19a3773e9c555f8441e3bc3671c" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="3.12.1"/>
  <changelog author="astieger@suse.com" date="1501675200">- Update to 3.20.0:
  * Potential incompatible change for clients incorrectly relying
    on unspecified behavior: column names returned by
    sqlite3_column_name() and sqlite3_column_name16() may return
    different names when views or subqueries are used in the FROM
    clause, and AS clauses are not used (as they should be)
  * Text of some error messages changed. Applications that depend
    on specific error message text may be impacted.</changelog>
  <changelog author="astieger@suse.com" date="1504094400">- update to 3.20.1:
  * Fix a potential memory leak in the new sqlite3_result_pointer()
    interface</changelog>
  <changelog author="idonmez@suse.com" date="1508932800">- Update to version 3.21.0
  * Take advantage of the atomic-write capabilities in the F2FS
    filesystem when available, for greatly reduced transaction
    overhead. This currently requires the
    SQLITE_ENABLE_BATCH_ATOMIC_WRITE compile-time option.
  * Allow ATTACH and DETACH commands to work inside of a
    transaction.
  * Allow WITHOUT ROWID virtual tables to be writable if the
    PRIMARY KEY contains exactly one column.
  * The "fsync()" that occurs after the header is written in a
    WAL reset now uses the sync settings for checkpoints.
    This means it will use a "fullfsync" on macs if PRAGMA
    checkpoint_fullfsync set on.
  * The sqlite3_sourceid() function tries to detect if the source
    code has been modified from what is checked into version
    control and if there are modifications, the last four
    characters of the version hash are shown as "alt1" or
    "alt2". The objective is to detect accidental and/or
    careless edits. A forger can subvert this feature.
  * Improved de-quoting of column names for CREATE TABLE AS
    statements with an aggregate query on the right-hand side.
  * Fewer "stat()" system calls issued by the unix VFS.
  * Enhanced the LIKE optimization so that it works with an
    ESCAPE clause.
  * Enhanced PRAGMA integrity_check and PRAGMA quick_check
    to detect obscure row corruption that they were formerly
    missing. Also update both pragmas so that they return
    error text rather than SQLITE_CORRUPT when encountering
    corruption in records.
  * The query planner now prefers to implement FROM-clause
    subqueries using co-routines rather using the query
    flattener optimization. Support for the use of
    co-routines for subqueries may no longer be disabled.
  * Pass information about !=, IS, IS NOT, NOT NULL, and
    IS NULL constraints into the xBestIndex method of virtual tables.
  * Enhanced the CSV virtual table so that it accepts the
    last row of input if the final new-line character is missing.
  * Remove the rarely-used "scratch" memory allocator.
    Replace it with the SQLITE_CONFIG_SMALL_MALLOC configuration
    setting that gives SQLite a hint that large memory allocations
    should be avoided when possible.
  * Added the swarm virtual table to the existing union virtual
    table extension.
  * Added the sqlite_dbpage virtual table for providing direct
    access to pages of the database file. The source code is
    built into the amalgamation and is activated using the
  - DSQLITE_ENABLE_DBPAGE_VTAB compile-time option.
  * Add a new type of fts5vocab virtual table - "instance"
  - that provides direct access to an FTS5 full-text
    index at the lowest possible level.
  * Miscellaneous microoptimizations reduce CPU usage by about 2.1%.
  Bug fixes
  * Fix a faulty assert() statement discovered by OSSFuzz.
    Ticket cb91bf4290c211d
  * Fix an obscure memory leak in sqlite3_result_pointer().
    Ticket 7486aa54b968e9b
  * Avoid a possible use-after-free error by deferring schema
    resets until after the query planner has finished running.
    Ticket be436a7f4587ce5
  * Only use indexes-on-expressions to optimize ORDER BY or
    GROUP BY if the COLLATE is correct. Ticket e20dd54ab0e4383
  * Fix an assertion fault that was coming up when the expression
    in an index-on-expressions is really a constant. Ticket aa98619ad08ddca
  * Fix an assertion fault that could occur following PRAGMA
    reverse_unordered_selects. Ticket cb91bf4290c211d
  * Fix a segfault that can occur for queries that use table-valued
    functions in an IN or EXISTS subquery. Ticket b899b6042f97f5
  * Fix a potential integer overflow problem when compiling a particular
    horrendous common table expression. This was another problem discovered
    by OSSFuzz. Check-in 6ee8cb6ae5.
  * Fix a potential out-of-bound read when querying a corrupt
    database file, a problem detected by Natalie Silvanovich of
    Google Project Zero. Check-in 04925dee41a21f.</changelog>
  <changelog author="astieger@suse.com" date="1517486400">- update to 3.22.0:
  * Add Zipfile virtual table to read and write a ZIP Archive.
  * Improved handling of WAL mode databases
  * various improvements, optimizations and bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1522670400">- update to 3.23.0:
  * Add the sqlite3_serialize() and sqlite3_deserialize()
    interfaces when the SQLITE_ENABLE_DESERIALIZE compile-time
    option is used.
  * Recognize TRUE and FALSE as constants. (For compatibility, if
    there exist columns named "true" or "false", then the
    identifiers refer to the columns rather than Boolean constants.)
  * Support operators IS TRUE, IS FALSE, IS NOT TRUE, and IS NOT FALSE.
  * Added the SQLITE_DBSTATUS_CACHE_SPILL option to
    sqlite3_db_status() for reporting the number of cache spills
    that have occurred.
  * The "alternate-form-2" flag ("!") on the built-in printf
    implementation now causes string substitutions to measure the
    width and precision in characters instead of bytes.
  * If the xColumn method in a virtual table implementation returns
    an error message using sqlite3_result_error() then give that
    error message preference over internally-generated messages.
  * Added the -A command-line option to the CLI to make it easier to
    manage SQLite Archive files.
  * Add support for INSERT OR REPLACE, INSERT OR IGNORE, and UPDATE
    OR REPLACE in the Zipfile virtual table.
  * Enhance the sqlite3changeset_apply() interface so that it is
    hardened against attacks from deliberately corrupted changeset
    objects.
  * Added the sqlite3_normalize() extension function.
  * Query optimizer enhancements
  * Various bug fixes
  * Fix various issues reported by fuzzers, including:
    + CVE-2018-8740: NULL pointer dereference on CREATE TABLE as
    (bsc#1085790)</changelog>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
</package>
<package pkgid="5c32d7976025a63d8bb75e300b68d043afe997599a1d6bcf3d83ee63df1ebc88" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="4.13.1"/>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
</package>
<package pkgid="abd3e580b898879035d8ce9751dbb3df5e908b3f1126563aec96fea41c573480" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.8.7" rel="10.12.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="jmcdonough@suse.com" date="1575374400">- Fix CVE-2019-14889: arbitrary command execution; (bsc#1158095)
  * Add CVE-2019-14889.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1578916800">- Update to latest version of patch for CVE-2019-14889; (bsc#1158095)
  * Update CVE-2019-14889.patch</changelog>
  <changelog author="jmcdonough@suse.com" date="1586174400">- Fix possible Denial of Service attack when using AES-CTR
  ciphers; (bsc#1168699)
  * Add 0001-CVE-2020-1730-Fix-a-possible-segfault-when-zeroing-A.patch</changelog>
</package>
<package pkgid="a03cb9edf6e07d556acbd5cb958ad5e41d740c5824a077b39d384b0c883f8a30" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="ad653d9a820c7231a1b66ba9f22221a7d163a0b4b5dd57e0bd23d218a3c15252" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="0605bbe60de7808f7983c503de46b7631c8200cc8e157db88d1fde86359c93ab" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="a42d9dd080e3b2956db734ebc872dde44c00eb3c86e82dba753a66f921e5070b" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="11.2.1+git610" rel="1.3.9"/>
  <changelog author="rguenther@suse.com" date="1623758400">- Change disable_32bit to only disable multilibs for arhcs subject
  to 32bit/64bit handling and make it effective on x86_64.
- Remove the duplicate spec header from cross.spec.in</changelog>
  <changelog author="rguenther@suse.com" date="1623931200">- Update to gcc-11 branch head (79c1185de4a05fdea13b6b0207), git340
  * Fixes ceph build failure.  [gcc#101078]</changelog>
  <changelog author="rguenther@suse.com" date="1624622400">- Update to gcc-11 branch head (62bbb113ae68a7e724255e1714), git400
  * Fixes issue with legacy Fortran code.  [gcc#101123, boo#1187273]</changelog>
  <changelog author="matz@suse.com" date="1625572800">- Provide a libc-bootstrap cross compiler for aarch64 and riscv64
- More preparation for a full glibc cross compiler (not yet active)</changelog>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
</package>
<package pkgid="7ab039b93767c7fd8b92cdc1a5fd4b2c64c7cb92cc0c1a9dd12f449166113209" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="385a52de3f0167cf75381ad2277c619a026b08b554a8814fc7ad0494ee523c3c" name="libtalloc2" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="150300.3.3.2"/>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to version 2.1.14
  + Fix some typos in the comments
  + Remove extra 0x prefix for the "%p" format specifiers,
    avoiding 0x0x0 strings in the output.
  + make sure we link extra-python versions of libraries</changelog>
  <changelog author="dmulder@suse.com" date="1549454400">- Update to version 2.1.15
  + Deprecate talloc_set_memlimit() and talloc_autofree_context()
  + Fix undefined behavior in talloc_memdup
  + The build uses python3 by default:
  + --extra-python would take python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to version 2.1.16
  + Fix standalone build of talloc.</changelog>
  <changelog author="jmcdonough@suse.com" date="1570104000">- Update to version 2.2.0
  + Remove pytalloc_CObject_FromTallocPtr()
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a talloc if
    required from that branch</changelog>
  <changelog author="mcepl@suse.com" date="1571659200">- Add two patches making build compatible with Python 3.8.0:
  - waf_upgrade.patch
  - waf_use_native_waf_timer.patch</changelog>
  <changelog author="mcepl@suse.com" date="1574769600">- Upgrade to 2.3.0.
- Patches waf_upgrade.patch and waf_use_native_waf_timer.patch
  are no needed anymore. They are subsumed by the upstream
  tarball.</changelog>
  <changelog author="nopower@suse.com" date="1583496000">- Upgrade to 2.3.1
  + Upgrade waf to 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/talloc: clang: Fix 'Value stored during its initialization
    is never read'.
  + Spelling fixes s/recieved/received/
  + talloc: ASAN fix for test_magic_protection.
  +  talloc: ASAN fix for test_rusty
  +  talloc: ASAN fix for test_pool_nest
  +  talloc: ASAN fix for test_talloc_free_in_destructor
  +  talloc: ASAN fix for test_realloc_on_destructor_parent</changelog>
  <changelog author="dimstar@opensuse.org" date="1602504000">- Fix build with RPM 4.16:
  bad %if condition:  01550 != 1110 || "x86_64" == x86_64
  no bare word support, x86_64 needs to be quoted</changelog>
  <changelog author="scabrero@suse.de" date="1617192000">- Update to 2.3.2</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 2.3.3; (jsc#SLE-23329);
  + python: Ensure reference counts are properly incremented
  + Change pytalloc source to LGPL;(bso#9931);</changelog>
</package>
<package pkgid="e20f5701791e03c8801a70a5c6f5ee3c6c168639ed995c21e3e069dcfc8fa132" name="libtasn1" arch="x86_64">
  <version epoch="0" ver="4.13" rel="4.5.1"/>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="24ac6981d0804aebfe029a02e7c8ea68c97d90769771d00357ddedef6056f966" name="libtasn1-6" arch="x86_64">
  <version epoch="0" ver="4.13" rel="4.5.1"/>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
</package>
<package pkgid="a03df2db375ca97ec9fce8dd6e56e52cc5c9353704fc9fe04041726e789707ae" name="libtdb1" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="150300.3.3.2"/>
  <changelog author="scabrero@suse.com" date="1506340800">- Update to 1.3.15.
  + Add protection against EINTR.
  + Truncate the file after expand failure, ENOSPC
  + Use posix_fallocate() to expand the file
  + Fix GCC compiler warnings</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Ensure neutrality of descriptions.
  Drop very old SUSE support. Replace old RPM macros by new
  constructs. Remove some useless ldconfig calls.</changelog>
  <changelog author="david.mulder@suse.com" date="1524830400">- Remove the conflicts between python3-tdb and python-tdb. These
  packages don't actually conflict, and need to be installed
  together in order to build samba with python3.</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to 1.3.16.
  + Fix build on AIX
  + Python3 compatibility fixes
  + Use tdb_wipe_all in "erase" command
  + Harden allocating the tdb recovery area
  + Make sure the hash size fits
  + Harden tdb_check_used_record against overflow
  + Harden tdb_rec_read
  + Handle TDB_NEXT_LOCK_ERR in tdb_traverse_internal
  + Fix build warnings</changelog>
  <changelog author="scabrero@suse.de" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="dmulder@suse.com" date="1548244800">- Update to 1.3.17</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to 1.3.18
  + Fix build problems with older python versions.
  + C99 build fixes.
  + Fix standalone build of tdb.</changelog>
  <changelog author="jmcdonough@suse.com" date="1570104000">- Update to version 1.4.2
  + Build fixes
  + Improve the performance by inlining the tdb_oob() checks
  + Do not propogate any errors from tdb_repack() to
    tdb_transaction_commit();  (bso#13952)
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tdb if
    required from that branch</changelog>
  <changelog author="nopower@suse.com" date="1583496000">- Update to version 1.4.3
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).
  + lib/tdb/docs/tracing.txt: typo fixes</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 1.4.4; (jsc#SLE-23329);
  + Fix a memory leak on error
  + python: remove all 'from __future__ import print_function'
  + Fix CID 1471761 String not null terminated
  + Use hex_byte() in parse_hex()
  + Use hex_byte() in read_data()
  + fix studio compiler build
  + Fix some signed/unsigned comparisons
  + also use __has_attribute macro to check for attribute support
  + Fix clang 9 missing-field-initializer warnings
  + pytdb tests: add test for storev()
  + pytdb: add python binding for storev()
  + tdbtorture: Use ARRAY_DEL_ELEMENT()
  + py3: Remove #define PyInt_FromLong PyLong_FromLong
  + py3: Remove #define PyInt_AsLong PyLong_AsLong
  + py3: Remove #define PyInt_Check PyLong_Check
  + tdb: Align integer types
- Drop obsolete patch ignore-tdb1-run-transaction-expand.diff
- Fix header file using undefined function visibility macro;
  Add patch 0001-tdb-Fix-invalid-syntax-in-tdb.h.patch; (bso#14762);</changelog>
</package>
<package pkgid="7c44eee08e466c1dc3ec86e037d32e94451b583b6de1f9c6a7023a59cae999f6" name="libtevent0" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="150300.3.3.2"/>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
  <changelog author="dmulder@suse.com" date="1533729600">- Update to version 0.9.37
  + simplify "poll" and "poll_mt" backends
  + make tevent_abort() reachable for backends
  + add tevent_common_invoke_*_handler() functions
  + add tevent_context_same_loop() function
  + add tevent_context_wrapper_create() infrastructure
  + add tevent_req_profile infrastructure</changelog>
  <changelog author="scabrero@suse.de" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="dmulder@suse.com" date="1549454400">- Update to version 0.9.38
  + Deprecate tevent wrapper api again
  + Build fixes
  + The build uses python3 by default:
  + --extra-python would take python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="dmulder@suse.com" date="1551787200">- Update to version 0.9.39
  + py_tevent: add_timer takes float argument
  + C99 build fixes.
  + Fix standalone build of tevent.</changelog>
  <changelog author="jmcdonough@suse.com" date="1570104000">- Update to version 0.10.0
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + New minor version to allow Samba 4.10 to release a tevent if
    required from that branch</changelog>
  <changelog author="mcepl@suse.com" date="1574769600">- Update to 0.10.1 ... make build with Python 3.8 working again
  (new waf).</changelog>
  <changelog author="nopower@suse.com" date="1583582400">- Update to version 0.10.2
  + Upgrade waf to version 2.0.18 to fix a cross-compilation issue;
    (bso#13846).</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to version 0.11.0
  + Other minor build fixes; (bso#14526);
  + Add custom tag to events
  + Add event trace api</changelog>
  <changelog author="nopower@suse.com" date="1641297600">- Adust tevent spec to export bundled libcmocka-tevent needed
  by ldb; (jsc#SLE-23329);</changelog>
</package>
<package pkgid="5758139f58bb03188d55d9b40c1e46e47fd1c4c4234256ed9ac574f6e843abb5" name="libtextstyle0" arch="x86_64">
  <version epoch="0" ver="0.20.2" rel="1.43"/>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO (boo#1138806).</changelog>
  <changelog author="jengelh@inai.de" date="1566561600">- Heed SLPP by placing libtextstyle.so.0 in the right package.
- Drop documentation from libtextstyle0, no one will read it there.
- Drop static library.
- Remove pointless ldconfig calls for libtextstyle-devel.
- Avoid pointless sh invocation of libtextstyle0 scriptlets.
- Avoid unnecessary |xargs rm.
- Remove redundant %clean section.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1572436800">- Remove autoreconf call (not required), and drop the no longer
  required libtool build dependency.</changelog>
  <changelog author="cvoegl@suse.de" date="1574769600">- Added xz to requires (boo#1141380)
- The previous update to 0.20.1 also fixes (boo#1113719)</changelog>
  <changelog author="cvoegl@suse.de" date="1576584000">- Add -lm to LDFLAGS (boo#1138806)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576929600">- Add missing Requires: libtextstyle0 in corresponding devel package,
  drop gettext-runtime Requires.
- Skip creation of shared libtextstyle in -mini flavor.
- Statically link to libtextstyle in -mini flavor, fixes
  broken bootstrap of gettext.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579089600">- Add libtextstyle0 to baselibs.conf: gettext-runtime-32bit has a
  dependency on it, so we also need the library built as -32bit.</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Don't disable openmp with qemu, the emulation works now</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1587902400">- update to 0.20.2:
  * The programs 'gettext', 'ngettext', when invoked with option -e,
    now expand '\\' and octal escape sequences, instead of
    swallowing them
  * xgettext now recognizes 'gettext' program invocations with the
    '-e' option, such as gettext -e 'some\nstring\n'
  * xgettext now assumes a Python source file is in UTF-8 encoding
    by default, as stated in PEP 3120
  * The value of the 'Icon' property is no longer extracted into
    the POT file by xgettext</changelog>
  <changelog author="christian.voegl@suse.com" date="1594123200">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="84cfdc1807840bf68f3a15d055751305736671be9ca4ff7da597d737b1915702" name="libthai-data" arch="x86_64">
  <version epoch="0" ver="0.1.27" rel="1.16"/>
  <changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.18:
  + Updated word break dictionary.</changelog>
  <changelog author="p.drouand@gmail.com" date="1360065600">- Update to version 0.1.19:
  + New API th_validate_leveled() for IM correction with strictness
    level.
  + Updated word break dictionary.
  + Switched to XZ tarball compression.</changelog>
  <changelog author="zaitor@opensuse.org" date="1382875200">- Update to version 0.1.20:
  + Updated word break dictionary.
  + Fix compiler warnings in test suites.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Update to version 0.1.21:
  + Updated word break dictionary.
  + Improve word breaking performance by 8.61%.</changelog>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Update to version 0.1.22:
  + Updated word break dictionary.
  + Improve word breaking performance by 0.38%.
  + No timestamp on Doxygen-generated doc.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447329600">- Update to version 0.1.23:
  + Correctly check doxygen version on configure.
  + Threadsafe word breaking.
  + Improve word breaking performance by 0.1%.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1448884800">- Update to version 0.1.24:
  + Fix infinite loop caused by optimization in previous version.
    (deb#805703).
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467374400">- Update to version 0.1.25:
  + New word break APIs for more thread-safety.
  + Fix compilation error and warning with GCC 6.
  + Do not test word breaking if dictionary is disabled.
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481889600">- Update to version 0.1.26:
  + Updated word break dictionary.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 0.1.27:
  + Fix another reproducibility issue in the generated
    documentation, caught by Debian Reproducible.
  + Updated word break dictionary.</changelog>
</package>
<package pkgid="3699d1a034136aaab312bcf7c1ee9c25c23ee6f1b65592173858401acefee6fc" name="libthai0" arch="x86_64">
  <version epoch="0" ver="0.1.27" rel="1.16"/>
  <changelog author="dimstar@opensuse.org" date="1340020800">- Update to version 0.1.18:
  + Updated word break dictionary.</changelog>
  <changelog author="p.drouand@gmail.com" date="1360065600">- Update to version 0.1.19:
  + New API th_validate_leveled() for IM correction with strictness
    level.
  + Updated word break dictionary.
  + Switched to XZ tarball compression.</changelog>
  <changelog author="zaitor@opensuse.org" date="1382875200">- Update to version 0.1.20:
  + Updated word break dictionary.
  + Fix compiler warnings in test suites.</changelog>
  <changelog author="dimstar@opensuse.org" date="1408795200">- Update to version 0.1.21:
  + Updated word break dictionary.
  + Improve word breaking performance by 8.61%.</changelog>
  <changelog author="dimstar@opensuse.org" date="1431691200">- Update to version 0.1.22:
  + Updated word break dictionary.
  + Improve word breaking performance by 0.38%.
  + No timestamp on Doxygen-generated doc.</changelog>
  <changelog author="zaitor@opensuse.org" date="1447329600">- Update to version 0.1.23:
  + Correctly check doxygen version on configure.
  + Threadsafe word breaking.
  + Improve word breaking performance by 0.1%.
  + Updated word break dictionary.</changelog>
  <changelog author="dimstar@opensuse.org" date="1448884800">- Update to version 0.1.24:
  + Fix infinite loop caused by optimization in previous version.
    (deb#805703).
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1467374400">- Update to version 0.1.25:
  + New word break APIs for more thread-safety.
  + Fix compilation error and warning with GCC 6.
  + Do not test word breaking if dictionary is disabled.
  + Updated word break dictionary.</changelog>
  <changelog author="zaitor@opensuse.org" date="1481889600">- Update to version 0.1.26:
  + Updated word break dictionary.</changelog>
  <changelog author="fezhang@suse.com" date="1509537600">- Update to version 0.1.27:
  + Fix another reproducibility issue in the generated
    documentation, caught by Debian Reproducible.
  + Updated word break dictionary.</changelog>
</package>
<package pkgid="4b3bb8ed11dc0ca938e97ffc8236b47ce6e9fb6e3d292ebb68a960c898d4685e" name="libtheoradec1" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="1.30"/>
  <changelog author="adrian@suse.de" date="1251374400">- update to version 1.1 beta 3
  * Much better encoder
    (faster and more details at same compressions level)
  * Playback received speed improvements, but bitstream format is
    untouched
- no package split yet for dec/enc/legacy libs due to 11.2 freeze</changelog>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
</package>
<package pkgid="e4d245c28cf16e331a6a40010f30f1e0098861eee8ef8d259c9cb200cb3873cc" name="libtheoraenc1" arch="x86_64">
  <version epoch="0" ver="1.1.1" rel="1.30"/>
  <changelog author="adrian@suse.de" date="1251374400">- update to version 1.1 beta 3
  * Much better encoder
    (faster and more details at same compressions level)
  * Playback received speed improvements, but bitstream format is
    untouched
- no package split yet for dec/enc/legacy libs due to 11.2 freeze</changelog>
  <changelog author="adrian@suse.de" date="1253966400">- update to version 1.1.0
  * minor fixes since beta 3</changelog>
  <changelog author="adrian@suse.de" date="1254916800">- update to version 1.1.1
  * minor bugfixes</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306152000">- Disable doxygen documentation to avoid build dates in
  - devel packages.
- add missing BuildRequires libpng-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1311768000">- remove fno-strict-aliasing from CFLAGS as it is no longer
  needed and will slow down things.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- remove examples that fail to build, also SDL and png
  are only needed for those, so remove from buildrequires.</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="idonmez@suse.com" date="1369310400">- Update descriptions, thanks to Perry Werneck</changelog>
  <changelog author="jengelh@inai.de" date="1409400000">- Split libtheoradec/enc from libtheora0 as they have different
  SO numbers
- Trim huge description; improve on RPM group classificaiton</changelog>
</package>
<package pkgid="dea44dd874ad6de47bb849c493345dddf6d0a769e3e36e6b9c5c2f913bb0f68a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="45.5.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
</package>
<package pkgid="adcd0aa1a182b9a4b45fd2f3b17e56ebb27fb13520aaca7aa6c92efd4bed9c84" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="1.131"/>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
</package>
<package pkgid="eb2bffb52783951910ee7722bdf210a39f0539d66851129fcfbde7a6ce7da9d4" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="1.131"/>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
</package>
<package pkgid="3cbe2c8ffb9bc0ac0346b54622185a2ad70b9c20471fa33480593593aae323e1" name="libtpms0" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="3.3.1"/>
  <changelog author="meissner@suse.com" date="1389700800">- import 0.5.1
  - software TPM driver library for hooking into QEMU</changelog>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
</package>
<package pkgid="f421da16f336e9453e58c43ebb19146e2565509b768ad75b49e9819f8ba72ed2" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.0.0~rc2" rel="150300.1.1"/>
  <changelog author="iforster@suse.com" date="1630929600">- Version 3.5.3
  - t-u: Purge kernels as part of package operations
    Required for live patching support [bsc#1189728]</changelog>
  <changelog author="iforster@suse.com" date="1631361600">- Version 3.5.4
  - tukit: Fix resolved support [boo#1190383]</changelog>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]</changelog>
</package>
<package pkgid="5e312999853bcb081745c6b961510ba6182993d54368c259e747a789568b4f78" name="libudev1" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="5719dac73a4ce8e2a1b29cfdae2712030107a68f800854c0432c005056871162" name="libunistring2" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="1.1"/>
  <changelog author="pgajdos@suse.com" date="1393934400">- fix parallel build
  * added parallel-make.patch [bnc#866723] (private)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 0.9.5
  * The data tables and line breaking algorithm have been updated
    to Unicode version 7.0.0.
  * In the include file uniname.h, the function unicode_name_character
    has been extended to look for name aliases.
- Remove patches merged on upstream release
  * libunistring-gnulib-ppc64le.patch
  * libunistring-parallel-make.patch
- Use download Url as source
- Remove autoconf, automake and libtool require; not needed anymore
- Bump so version to 2
  libunistring0 &gt; libunistring2</changelog>
  <changelog author="astieger@suse.com" date="1436443200">- GNU libunistring 0.9.6:
  * The data tables and line breaking algorithm have been updated
    to Unicode version 8.0.0.
- add keyring and verify source signature
- fix SLE 11 SP3 build</changelog>
  <changelog author="mlin@suse.com" date="1483444800">- Add baselibs.conf to generate -32bit packages</changelog>
  <changelog author="pgajdos@suse.com" date="1493985600">- updated to 0.9.7:
  * license change
  * build system changes</changelog>
  <changelog author="pgajdos@suse.com" date="1503057600">- try to not run tests in parallel, make check stucks randomly</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- update to 0.9.8:
  * The data tables and line breaking algorithm have been updated
    to Unicode version 9.0.0
  * In the include file unigbrk.h, the function uc_grapheme_breaks
    has been added to accommodate the new UAX#29 rules involving 3
    or more consecutive characters</changelog>
  <changelog author="astieger@suse.com" date="1519819200">- update to 0.9.9:
  * Fixed a multithread-safety bug</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Fix RPM groups and summaries.</changelog>
  <changelog author="pgajdos@suse.com" date="1617019200">- version update to 0.9.10 [bsc#1183794]
  * The functions
    u8_casing_prefix_context, u8_casing_prefixes_context,
    u8_casing_suffix_context, u8_casing_suffixes_context,
    u16_casing_prefix_context, u16_casing_prefixes_context,
    u16_casing_suffix_context, u16_casing_suffixes_context,
    u32_casing_prefix_context, u32_casing_prefixes_context,
    u32_casing_suffix_context, u32_casing_suffixes_context,
    that are documented since version 0.9.1, are now actually
    implemented.
  * bump gnulib version</changelog>
</package>
<package pkgid="91482a6688ab6d6f2f1891f09b615ead8cd05c6077dc87782e8951c062783c02" name="libunwind" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="4.5.1"/>
  <changelog author="avindra@opensuse.org" date="1516795200">- Upgrade to 1.2.1
  * minor package fixes for tilegx, mips, others
  * fix missing include file issues
- cleanup with spec-cleaner
- do not ship static libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update keyring</changelog>
  <changelog author="ronisbr@gmail.com" date="1518955200">- Add patch `fix_versioning_libunwind_1.2.1.patch`.
  * This patch fixes the upstream bug gh#libunwind/libunwind#30.
    This bug was causing the julia build process to fail.
    NOTE: This patch shall be removed in the next version of
    libunwind.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Update to 1.3.1
  * Iteration of unwind register states support
  * Freebsd/Armv6 support
  * Many, many dwarf bugfixes
  * Mips remote unwind support
  * aarch64 ptrace support
- fix_versioning_libunwind_1.2.1.patch: removed</changelog>
  <changelog author="jengelh@inai.de" date="1562500800">- Ensure neutrality of description. Avoid name repetition in
  summaries.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160876]
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add libunwind-gcc10-build-fno-common.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588075200">- Update to 1.4.0
  - Fix compilation with -fno-common.
  - arm: clear ip thumb/arm mode bit before move to previous instruction (#131)
  - tests: fix test-coredump-unwind without HAVE_EXECINFO_H (#165)
  - There are 20 not 9 failing tests on Solaris (#162)
  - change asm to __asm__ to support -std=c11 or similar (#149)
  - x86-64: make `is_cached_valid_mem` functional (#146)
  - Allow to build without weak `backtrace` symbol. (#142)
  - fix compile issue on SH platform (#137)
  - Add support for zlib compressed elf .debug_frame sections
  - README: add libc requirement description (#121)
  - Older systems (e.g. RHEL5) do not have pipe2(). (#122)
  - x86_64: Add fixup code if previous RIP was invalid (#120)
  - Fix format specifier for int64_t:29 (#117)
  - Delete hardcode of address size to support MIPS64. (#114)
  - Added braces to suppress empty if/else warnings (#112)
  - mips: make _step_n64 as a static function
  - x86_64: Fix tdep_init_done when built with libatomic_ops
  - x86_64: tsan clean (#109)
  - Fixed a missing dependency in dwarf-eh.h
  - dwarf: clang doesn't respect the static alias (#102)
- Update libunwind.keyring
- Remove libunwind-gcc10-build-fno-common.patch fixed upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589371200">- Fix compilation with -fno-common [bsc#1171549]
- Add patch libunwind_U_dyn_info_list.patch</changelog>
  <changelog author="azouhr@opensuse.org" date="1603195200">- Enable s390x for building</changelog>
  <changelog author="dmueller@suse.com" date="1611057600">- update to 1.5.0:
  * dwarf: clang doesn't respect the static alias
  * Fixed a missing dependency in dwarf-eh.h
  * x86_64: Fix tdep_init_done when built with libatomic_ops
  * mips: make _step_n64 as a static function
  * Added braces to suppress empty if/else warnings
  * Delete hardcode of address size to support MIPS64.
  * Fix format specifier for int64_t:29
  * Add initial support for Solaris x86-64
  * x86_64: Add fixup code if previous RIP was invalid
  * x86-64: make `is_cached_valid_mem` functional
  * arm: clear ip thumb/arm mode bit before move to previous instruction
  * Fix compilation with -fno-common.
  * Fix off-by-one error in x86_64 stack frames
  * aarch64: Fix __sigset build issue on muslC
  * Make SHF_COMPRESSED use contingent on its existence
- remove libunwind_U_dyn_info_list.patch (upstream)</changelog>
</package>
<package pkgid="5b95d4023a8b852d4fde58937adf9173fbe3d6ac4f0890f77886d9ff5a8f4a86" name="liburcu6" arch="x86_64">
  <version epoch="0" ver="0.12.1" rel="1.30"/>
  <changelog author="dvaleev@suse.com" date="1386072000">- Fix build on ppc64le platform
- added patches:
  * userspace-rcu-ppc64le.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1396008000">- updated to 0.8.4:
  * Fix: move wait loop increment before first conditional block
  * Fix: high cpu usage in synchronize_rcu with long RCU read-side C.S.
  * Fix: out of tree build: doc/examples
  * Fix: out of tree build tests/common
  * tests/unit: use lib rather than source
  * automake: Rename INCLUDES to AM_CPPFLAGS (new name)
  * tests regressions: use lib rather than recompile from source
  * tests: use common lib rather than recompile compat sources
  * urcu tests: use lib rather than compile from source
  * urcu mb tests: use lib rather than recompile from source
  * urcu signal tests: use library rather than recompile source
  * tests: move yield debug to common test library
  * tests urcu bp: use lib rather than recompile source
  * test_urcu_defer: link on urcu lib rather than recompile source
  * tests/benchmark: use urcu qsbr lib rather than recompile from source
  * Pass the CC variable to the example Makefiles
  * Fix: urcu-bp interaction with threads vs constructors/destructors
  * Fix undefined NULL pointer arithmetic
  * Blacklist ARM gcc 4.8.0, 4.8.1, 4.8.2
  * rculfhash: document max_nr_buckets = 0</changelog>
  <changelog author="mq@suse.cz" date="1416830400">- updated to 0.8.6:
  * Fix: silence gcc -Wextra warning
  * compiler: use __GNUC__ instead of the undefined __GNUC_MAJOR__
  * Fix: lfstack reversed empty/non-empty return value
  * lfstack: fix: add missing __cds_lfs_init
  * Fix: preserve example files' timestamps when copying
  * rculfhash: remove duplicated code
  * rculfhash: handle pthread_create failures
  * rculfhash: fall back to single-threaded resize on calloc failure
  * x86: drop extra semi-colon in caa_cpu_relax
  * Fix: Use after free in rcu_barrier()
  * Fix: rcu_barrier(): uninitialized futex field
  * call_rcu threads should clear their PAUSED flag when they unpause
  * Fix: bring back dummy rcu_bp_exit symbol</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 0.8,7 (FATE#319273)
  Changelog 0.8.7:
  * Fix: deadlock when thread join is issued in read-side C.S.
  * Fix: rename RCU_DEBUG to DEBUG_RCU in urcu-qsbr.h
  * Mark braced-groups within expressions with __extension__
  * Fix: compat_futex_noasync race condition
  * Fix: documentation: urcu-pointer.h: s/rcu_dereference_pointer/rcu_dereference/
  * Fix: call rcu should call internal RCU API</changelog>
  <changelog author="dmueller@suse.com" date="1441022400">- add userspace-rcu-aarch64.patch (fate#318370)
  enables build for aarch64</changelog>
  <changelog author="dmueller@suse.com" date="1443528000">- remove dependency on gpg-offline, is done by source validator
- drop userspace-rcu-ppc64le.patch, included in
  userspace-rcu-aarch64.patch</changelog>
  <changelog author="dvaleev@suse.com" date="1458043200">- userspace-rcu-ppc64le.patch use ppc for ppc64le
  http://git.lttng.org/?p=userspace-rcu.git;a=commit;h=61126bd9c901fa403315db71d8d5351d716717cb</changelog>
  <changelog author="tonyj@suse.com" date="1504267200">- Update to version 0.10.0 for SLE15 (bsc#1055683)
  Drop patch: userspace-rcu-aarch64.patch (upstream v0.9.0~99)
  Drop patch: userspace-rcu-ppc64le.patch (upstream v0.9.0~24)
  Adjust library soname to 6
  Update keyring</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Add baselibs.conf: create liburcu6-32bit package as a dependency
  to liblttng-ust0-32bit.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 0.12.1:
  * Fix: tls-compat.h exposes compiler-dependent public configuration
  * Fix: tap array subscript has type char warning
  * tls-compat.h: introduce DEFINE_URCU_TLS_INIT
  * Use _umtx_op for futex on FreeBSD
  * Add FreeBSD, DragonFly to syscall-compat.h
  * urcu-bp: perform thread registration on urcu_bp_register_thread
  * Require automake &gt;= 1.12
  * cds_lfht_is_node_deleted parameter can be marked const
  * Fix: provide errno as argument to urcu_die()
  * Fix: rculfhash worker needs to unblock to SIGRCU
  * Cleanup: test_perthreadlock_timing: handle pthread mutex errors
  * Fix: SONAME bump to 6.1.0
  * Cleanup: remove unused variable from configure.ac check
  * Fix: urcu/futex.h: users of struct timespec should include time.h
  * Bump library version to 6:0:1
  * Cleanup: update code layout to fix old gcc warning
  * Fix: typo CPPLAGS in examples Makefile
  * Harmonize pprint macro across projects
  * Check for TLS support after CC detection
  * Update macros from the autotools archive
  * tap-driver.sh: flush stdout after each test result
  * Update dead link in lgpl-relicensing.txt
  * Add multiflavor compat identifiers
  * Cleanup: missing sign compare fixes
  * Cleanup: enable signed/unsigned compare compiler warning
  * Cleanup: compiler warning on 32-bit architectures
  * config.h.in: rename CONFIG_RCU_MULTIFLAVOR to CONFIG_RCU_HAVE_MULTIFLAVOR
  * rculfhash: implement iterator debugging config option
  * Fix: examples silent rules on Solaris
  * Add missing fall through annotations
  * Fix: symbol aliases with TLS compat
  * Port: no symbols aliases on MacOS
  * Add -Wextra to CFLAGS
  * Add silent mode to examples Makefiles
  * doc: update examples to API changes
  * test multiflavor single compile unit
  * Update README following API changes
  * Use new header locations for includes from urcu code
  * Update call-rcu.h and defer.h comments and include guards
  * rculfqueue.h: do not include urcu-call-rcu.h
  * rculfhash: support use with multiple flavors per compile unit
  * rculfhash: do not include urcu-call-rcu.h from public API
  * Refactor liburcu to support many flavors per compile unit
  * Fix: only wait if work queue is empty in real-time mode
  * Fix: don't wait after completion of a work queue job batch
  * Fix: don't wait after completion of job batch if work queue is empty
  * Fix: workqueue: struct urcu_work vs rcu_head mixup
  * Cleanup: workqueue: update comments referring to call-rcu
  * Fix: mixup between URCU_WORKQUEUE_RT and URCU_CALL_RCU_RT
  * test_rwlock: Add per-thread count to verbose output
  * Add *.exe to gitignore for Cygwin
  * Fix: pthread_rwlock initialization on Cygwin
  * Fix: compat_futex_noasync on Cygwin
  * wfcqueue: allow defining CDS_WFCQ_WAIT_SLEEP to override `poll'
  * Update documentation for call_rcu before/after fork
  * Add support for the RISC-V architecture
  * Tests: Add tap-driver.sh for automake &lt; 1.12
  * Tests: Replace prove by autotools tap runner
  * liburcu-bp: Use membarrier private expedited when available
  * liburcu: Use membarrier private expedited when available
  * rculfhash: improve error handling of mmap backend
  * Fix: don't use overlapping mmap mappings on Cygwin
  * Tests fix: errors in shell scripts
  * Revert "Use initial-exec tls model"
  * Use initial-exec tls model
  * Fix: don't use membarrier SHARED syscall command in liburcu-bp
  * Tests fix: add missing Cygwin thread id
  * Fix: assignment from incompatible pointer type warnings
  * Tests fix: unused variable warnings
  * Fix: add missing m68k headers to dist</changelog>
</package>
<package pkgid="5239323631f721b70929d2c0b1fe13c913016c28104ecbb84db1c6625abb6d1c" name="liburing1" arch="x86_64">
  <version epoch="0" ver="0.6" rel="2.1"/>
  <changelog author="jthumshirn@suse.com" date="1574856000">- Initial packaging for openSUSE (jsc#SLE-7494)</changelog>
  <changelog author="jthumshirn@suse.com" date="1576152000">- Fix builds on ppc64le and s390x (bsc#1159055)
  + barrier.h-add-generic-smp_mb-implementation.patch</changelog>
  <changelog author="milsav92@outlook.com" date="1604059200">!!IMPORTANT!!
  Version 0.7 BREAKS ABI COMPATIBILITY WITHOUT CHANGING THE SONAME!!!
  https://github.com/axboe/liburing/issues/228
  SONAME is bumped to 2 in commit 25bbcbef3e0a8bfba8044be55d08d5116c51dccd
  im master branch.
  !!!IMPORTANT!!!
- Update to version 0.6
  - removed barrier.h-add-generic-smp_mb-implementation.patch since
    it was merged in commit ba97eaf8f9ef2030d581be10df9d875dbfadc91d
- License changed to match upstream</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- skip building the tests that are neither installed nor run
  as they fail to build on 32bit platforms (like e.g. armv7l) (bsc#1181571)</changelog>
</package>
<package pkgid="f884ee8a3abbe82529787542e646ddad87e846085066dfa05787fd4b5fed7539" name="libusb-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.0.21" rel="3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1335441600">- Use %makeinstall instead of %make_install to build on SLE11.</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sbrabec@suse.cz" date="1391774400">- New upstream, new home page.
- Update to version 1.0.18:
  * API extensions:
  * hotplug support
  * topology support
  * error processing, detaching, debugging etc.
  * many fixes
  * for more see ChangeLog</changelog>
  <changelog author="sbrabec@suse.cz" date="1400673600">- Build with pkgconfig(libudev), not pkgconfig(udev).</changelog>
  <changelog author="mardnh@gmx.de" date="1406116800">- Update to version 1.0.19:
  * Add support for USB bulk streams on Linux and Mac OS X (#11)
  * Windows: Add AMD and Intel USB-3.0 root hub support
  * Windows: Fix USB 3.0 speed detection on Windows 8 or later (#10)
  * Added Russian translation for libusb_strerror strings
  * All: Various small fixes and cleanups</changelog>
  <changelog author="mardnh@gmx.de" date="1442232000">- Update to version 1.0.20:
  * Add Haiku support
  * Fix multiple memory and resource leaks (#16, #52, #76, #81)
  * Fix possible deadlock when executing transfer callback
  * New libusb_free_pollfds() API
  * Darwin: Fix devices not being detected on OS X 10.8 (#48)
  * Linux: Allow larger isochronous transfer submission (#23)
  * Windows: Fix broken builds Cygwin/MinGW builds and compiler warnings
  * Windows: Fix broken bus number lookup
  * Windows: Improve submission of control requests for composite devices
  * Examples: Add two-stage load support to fxload (#12)
  * Correctly report cancellations due to timeouts
  * Improve efficiency of event handling
  * Improve speed of transfer submission in multi-threaded environments
  * Various other bug fixes and improvements</changelog>
  <changelog author="olaf@aepfle.de" date="1445601600">- Remove _smp_mflags usage to fix sporadic build errors</changelog>
  <changelog author="idonmez@suse.com" date="1464177600">- Update to GNOME 3.20.2 FATE#318572</changelog>
  <changelog author="mardnh@gmx.de" date="1477828800">- Update to version 1.0.21
  * Core: Refactor code related to transfer flags and timeout handling
  * Darwin: Ignore root hub simulation devices
  * Darwin: Improved support for OS X El Capitan
  * Darwin: Work around devices with buggy endpoint descriptors
  * Darwin: Do not use objc_registerThreadWithCollector after its deprecation
  * Darwin: Use C11 atomics on 10.12+ as the OS atomics are now deprecated
  * Linux: Support preallocating kernel memory for zerocopy USB
  * Linux: Deal with receiving POLLERR before all transfers have completed
  * Solaris: Add solaris backend
  * Windows: Add Visual Studio 2015 support
  * Windows: Add usbdk backend
  * Prevent attempts to recursively handle events
  * Fix race condition in handle_timeout()
  * Allow transferred argument to be optional in bulk APIs
  * Various other bug fixes and improvements
- Fix source url</changelog>
  <changelog author="glin@suse.com" date="1604404800">- Add libusb-bsc1178376-ppc-linux-flag.patch to fix the inclusion
  of "sys/time.h" on PowerPC (bsc#1178376)</changelog>
</package>
<package pkgid="ba1091bc5b442638af865747a88bdf2cd9dafd03fa45568ca3853fd1e4f1f7d7" name="libusbredirparser1" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="1.29"/>
  <changelog author="dimstar@opensuse.org" date="1328011200">- Update to version 0.3.3:
  + usbredirparser:
  - add usbredirfilter code, to help apps exclude certain devices
    from redirection.
  + usbredirhost:
  - add a usbredirhost_check_device_filter helper function.
- Changes from version 0.3.2:
  + Switched to automake/autoconf/libtool based make system
  + usbredirparser:
  - limited multi-thread safeness, see README.multi-thread
  - extend the device_connect packet header with a device_version
    field
  - Add a hello_func callback which gets called after receiving
    the hello packet from the other side. This can be used to
    determine when the caps from the other side have been
    received and it thus is safe to call
    usbredirparser_send_device_connect.
  + usbredirhost:
  - limited multi-thread safeness, see README.multi-thread
  - properly handle clear stalls send from the usbguest
  - try to keep our iso buffer size near the target size
  - implement usb_redir_cap_connect_device_version
- Call configure instead of exporting LDFLAGS and CPPFLAGS; this
  is now possible as upstream switched to auto*.</changelog>
  <changelog author="dimstar@opensuse.org" date="1331294400">- Update to version 0.4.2:
  + Add usb_redir_babble status code
  + usbredirparser:
  - extend the usb_redir_ep_info packet header with a
    max_packet_size field
  + usbredirhost:
  - Ensure we always re-attach kernel drivers on cleanup
  - Make set_config handling more robust
  - A set_config or a reset can cause us to loose access to the
    device
- Changes from version 0.4.1:
  + Brown paper bag release, fix a return without value in a non
    void function
- Changes from version 0.4:
  + Add usb_redir_filter_reject and usb_redir_filter_filter
    packets and an usb_redir_cap_filter capability flag
  + Add an usb_redir_device_disconnect_ack packet and an
    usb_redir_cap_device_disconnect_ack capability flag
  + usbredirparser:
  - Add an usbredirparser_have_peer_caps function
  + usbredirhost:
  - Allow re-using a host instance with multiple devices
  - Quite a few bugfixes</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1334923200">- Update to version 0.4.3:
  + usbredirhost:
  - Don't crash on devices in unconfigured state
  - Restore original device configuration when releasing the device
  - Significantly speed up reset handling
  + usbredirserver:
  - Add a manpage</changelog>
  <changelog author="p.drouand@gmail.com" date="1354536000">- Update to version 0.5:
  - Windows support
  - Add support for 64 bit packet ids
  - usbredirparser:
  - Add state serialization support
  - API and ABI changed to use 64 bit ids,
  - usbredirhost:
  - Remove bulk packets time out, this fixes various devices not working
  - Ack packet cancels immediately
  - Now supports 64 bits packet ids
  - Use libusb_error_name instead of logging raw error codes
  - usbredirfilter_check return -ENOENT rather then -EPERM if no rules match a
  device, this way the caller can differentiate between a deny caused by a
  matching rule, and one caused by there being no matching rules.</changelog>
  <changelog author="p.drouand@gmail.com" date="1354536001">- Update to version 0.5.1:
  + usbredirparser:
  - usbredirparser_has_data_to_write now returns the write queue depth,
    instead of only 0 or 1
  + usbredirhost:
  - usbredirhost_has_data_to_write now returns the write queue depth,
    instead of only 0 or 1
  - when the write queue gets too large, drop isochronous input packets</changelog>
  <changelog author="p.drouand@gmail.com" date="1354536002">- Update to version 0.5.2:
  + usbredirparser:
  - rename libusbredirparser.pc to libusbredirparser-0.5.pc
    This should really have been done with the 0.5 release as API
    compatibility with previous releases was broken there!</changelog>
  <changelog author="p.drouand@gmail.com" date="1354536003">- Rename libusbredirparser0 to libusbredirparser1:
  The lib version has changed</changelog>
  <changelog author="zaitor@opensuse.org" date="1356264000">- Update to version 0.6:
  + usbredirproto:
  - add support for bulk packets with 32 bits length
  - add support for buffered bulk input
  + usbredirparser:
  - add support for bulk packets with 32 bits length
  - add support for buffered bulk input
  + usbredirhost:
  - add support for bulk packets with 32 bits length
  - queue multiple transfers for interrupt receiving
  - add support for buffered bulk input
  - only apply mult to max-packet-size for isoc high speed
    endpoints
  - add a do-not-reset device blacklist, populate it with
    1210:001c
- Changes from version 0.5.3:
  + usbredirparser:
  - add support for bulk packets longer then 65535 bytes
  + usbredirhost:
  - add support for bulk packets longer then 65535 bytes</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.7:
  + usbredirproto:
  - The usb_redir_ep_info_header has been extended with a
    max_streams field, this is only send / received if both sides
    have usb_redir_cap_bulk_streams.
  - Change bulk_stream packet definitions to allow allocating/
    freeing streams on multiple endpoints in one go, technically
    this is a protocol change, but no-one has implemented
    usb_redir_cap_bulk_streams so far, so we can safely do this.
  - Add a USBREDIR_VERSION define so applications can test
    against which version they are building.
  + usbredirparser: Fix a bug causing parsing breakage when
    receiving a hello packet with 64 bit id capabiliy and another
    packet in succession so that they both got parsed in one
    usbredirparser_do_read call.
  + usbredirhost:
  - Use libusb_set_auto_detach_kernel_driver when available.
  - Add support for bulk streams, this only gets enabled with
    libusbx &gt;= 1.0.19.
  - Stop iso / bulk streams on reset.
  - Make cancellation handeling more robust.
  - Reset device on release.
  + usbredirserver: Listen to both ipv4 and ipv6 addresses on ipv6
    capable systems.</changelog>
  <changelog author="mkravec@suse.com" date="1455624000">- Update to version 0.7.1
  + usbredirfilter:
  - force check to device which had all interfaces skipped. This fix a bug
    which allow a KVM device to be redirect when it should not
  + usbredirparser:
  - allow missing capabilities from source host when loading a USB
    redirection stream during a qemu migration
  + usbredirhost:
  - new callback to drop isoc packets when application's pending writes buffer
    size is too big; The threshold calculation aims at 10fps as worst case to
    give at least 150ms of continuous data to application.</changelog>
</package>
<package pkgid="8ce3d020b726089aa8445bbb9afc96dfe7228c75d200d68541c7ebd4e9915a40" name="libutempter0" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="3.42"/>
  <changelog author="aj@suse.de" date="1289476800">- Use group utmp for utempter (bnc#652877).</changelog>
  <changelog author="uli@suse.com" date="1317729600">- cross-build fix: use %__cc macro</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1318680000">- fixed typo in utempter.spec</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="meissner@suse.com" date="1370433600">- updated to 1.1.6 upstream (bnc#823302)
  - new apis (old are staying)
- utempter-ppc64.patch: is upstream, removed
- utempter-0.5.5-pie.diff: done differently, removed
- utempter-no-staticlib.patch: no static library wanted
- gpg source tarball checking
- hooked up permissions framework correctly</changelog>
  <changelog author="meissner@suse.com" date="1371816000">- remove gpg offline checking to avoid buildloops. will be
  done by source service.</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Obsoletes utempter-32bit in libutempter0-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1415880000">- remove /sbin/ldconfig -n $DESTDIR%{_libdir} as it should be not
  needed in install phase
- Remove Requires: %name as there is no name and adjust obsolete
  as there exist version 0.5.5.6 which is larger than the provides
- Remove sle10 obsolete for ppc64 utempter-64bit
- Clean-up with spec-cleaner</changelog>
  <changelog author="schwab@linux-m68k.org" date="1505304000">- Pre-require group(%{utmpGroup})</changelog>
  <changelog author="fvogt@suse.com" date="1519387200">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="18d3470b2a31a909f3bb33813c094106dcf8681b746dcecc6165a29d8470d0c9" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="2a3ca09febec78690f224b7e79b93f275d1f65d3296cc7469435e939254e5b93" name="libvdeplug3" arch="x86_64">
  <version epoch="0" ver="2.3.2+svn587" rel="3.23"/>
  <changelog author="andrea@opensuse.org" date="1304856000">- New package</changelog>
  <changelog author="andrea@opensuse.org" date="1304942400">- clean up spec file, split out libraries and cryptcab package</changelog>
  <changelog author="andrea@opensuse.org" date="1305806400">- split out slirpvde to fix legal issues in bug bnc694822
- fixed descriptions on libraries subpackages</changelog>
  <changelog author="andrea@opensuse.org" date="1334577600">- new upstream version 2.3.2 (bug fix release)
- disabled paralled job that break build
- added python support</changelog>
  <changelog author="coolo@suse.com" date="1359892800">- update license to new format</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Drop README.SUSE we are better of with the online guides
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1500465601">- Add patch to build with our gcc checks:
  * vde2-buffer-overflow.patch
- Switch to svn checkout service in order to get something newer
  than 2011 tarball
- Update to version 2.3.2+svn587:
  * allow pipes on stdin for daemonized switches
  * vde_vxlan initial release
  * Add format string to fprintf calls.
  * Clean up unused variables.
  * In 2014, I think we can stop trying to outsmart the compiler. Remove
  * "register" storage class.
  * Add missing headers in vde_router Makefile.am.
  * Add missing format string in snprintf.
  * Add missing source files in vde_vxlan Makefile.am.
  * Enable vde_over_ns when header is present.
  * Remove unused variable in vde_over_ns.
  * vde_autolink: Add missing null entry in getopt_long array.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rename devel subpackages according to shared library guideline.
- Rectify RPM groups.</changelog>
  <changelog author="vcizek@suse.com" date="1505131200">- Patch for openssl 1.1 compatibility
  * add vde2-openssl_1.1_compatibility.patch from Debian</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Drop python2 from the buildrequirements
  * This means we lose python bindings but as the package is no
    longer developed there is 0 chance to obtain python3 bindings
    and the code is not compatible</changelog>
</package>
<package pkgid="7c0b04edff37c88c68d433c4eb72636a3ebb0f7a0884b59446cebeb64ef66090" name="libverto1" arch="x86_64">
  <version epoch="0" ver="0.2.6" rel="3.20"/>
  <changelog author="hguo@suse.com" date="1431086400">- Source extracted from Fedora 21 release SRPM, with minor adjustments.</changelog>
  <changelog author="pth@suse.de" date="1431086401">- Name shared library packages according to policy.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1432987200">- Add baselibs.conf to enable multilib.
- Spec cleanup.</changelog>
  <changelog author="hguo@suse.com" date="1434974400">- Remove irrelevant changelog entries from changelog file.</changelog>
  <changelog author="mlin@suse.com" date="1463400000">- Split off libev, glib and tevent module to sub-package</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- [fate#320326](https://fate.suse.com/320326)</changelog>
  <changelog author="meissner@suse.com" date="1509278400">- add libverto-devel baselib for use by libkrb5-devel-32bit,
  for use by Wine 32bit.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="c4597c798f45f76d89093bd622e2f7e601743ee3f3f62c5cf23fe1376e6b5996" name="libvirglrenderer0" arch="x86_64">
  <version epoch="0" ver="0.6.0" rel="4.9.1"/>
  <changelog author="brogers@suse.com" date="1464782400">- Refine BuildRequires tags</changelog>
  <changelog author="brogers@suse.com" date="1464955200">- Further tweaks to package layout, including splitting out
  the test server into it's own package.</changelog>
  <changelog author="lma@suse.com" date="1487332800">- Address various security issues
  * Fix null pointer dereference in vrend_clear (CVE-2017-5937 bsc#1024232)
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
  * Fix host memory leak issue in virgl_resource_attach_backing (CVE-2016-10214 bsc#1024244)
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
  * Fix memory leak in int blit context (CVE-2017-5993 bsc#1025505)
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
  * Fix heap overflow in vertex elements state create (CVE-2017-5994 bsc#1025507)
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
  * Fix a stack overflow in set framebuffer state (CVE-2017-5957 bsc#1024993)
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch</changelog>
  <changelog author="lma@suse.com" date="1487937600">- Update package to 0.6.0
  The following patches will be removed:
  0001-48f67f60-renderer-fix-NULL-pointer-deref-in-vrend_clear.patch
  0002-40b0e781-renderer-fix-a-leak-in-resource-attach.patch
  0003-6eb13f7a-vrend-fix-memory-leak-in-int-blit-context.patch
  0004-114688c5-renderer-fix-heap-overflow-in-vertex-elements-state-.patch
  0005-926b9b34-vrend-fix-a-stack-overflow-in-set-framebuffer-state.patch
  All of the removed patches were already included in 0.6.0,
  So we dont need them any more.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Fix RPM groups</changelog>
  <changelog author="lma@suse.com" date="1489147200">- Fix memory leak in vertex elements state create (CVE-2017-6386 bsc#1027376)
  0001-737c3350-renderer-fix-memory-leak-in-vertex-elements-state-cr.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Clean up spec file with spec-cleaner
- Use source url
- Add gpg signature
- Make building more verbose
- Explicitly require python2</changelog>
  <changelog author="lma@suse.com" date="1576843200">- Add 4 security fixes
  * Check resource creation more thoroughly (CVE-2019-18388 bsc#1159479)
  0002-5d03711-vrend-Keep-the-max-texture-sizes-in-the-vrend_state.patch
  0003-0d9a2c8-vrend-Check-resource-creation-more-thoroughly.patch
  * check info formats in blits (CVE-2019-18390 bsc#1159478)
  0004-24f67de-vrend-check-info-formats-in-blits.patch
  * check transfer bounds for negative values too (CVE-2019-18389 bsc#1159482)
  0005-cbc8d8b-vrend-check-transfer-bounds-for-negative-values-too-.patch
  * check transfer iov holds enough data for the data upload (CVE-2019-18391 bsc#1159486)
  0006-2abeb18-vrend-check-that-the-transfer-iov-holds-enough-data-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1642420800">- security update
- added patches
  fix CVE-2022-0175 [bsc#1194601], VUL-0: CVE-2022-0175: virglrenderer: Missing initialization of res-&gt;ptr
  + virglrenderer-CVE-2022-0175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- security update
  * Fix OOB in read_transfer_data() (CVE-2022-0135 bsc#1195389)
    Add 0007-95e581fd-vrend-fix-oob-read_transfer_data.patch</changelog>
</package>
<package pkgid="6d37f509858b8a3ffa5b951f3eb1cf3392f33c2a70168e4a176b5eb3f6991b85" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="b64989d1ffdf1820e834dd10cb381000067a588154dc3bd42778ee012aa26d52" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="3bd501b764cc09b03ad106aa70997544ff4015aa32e8d121ff78e93d0bd1d355" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="44b70bcf0a412f0e354c23ca8511eb3bab2cafc5698c3893695c239f779d0a7d" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="4c4730824d12a25b4b378458e2825b993dba39ccfac66bd3abd3b9fa47bc18cf" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="1326c1d71f8ed749f301d9c6714e6df88cadacf45a33db7596d27b1c45a51c39" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="f827ac9a585ef8b1e099855830860412745f7cfa918bbdb36014f2af95b05da0" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="432db0c577e5ca9c59b1aaed16631daa9910f3c1bb8a9034ddef9d6b6ac154d0" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="da133e2c4ce8cee74f4ea695d30ec4912e718e3e86370f3a702eaa5c403a1fe2" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="6adafaefc3d7922ab4c6e7ebabd01b04db778d47a8d9dda69715ea49581ced4d" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="ce68ace3810b99cb95166cf69128eabda6e78a4316020c53de839d882dd0f414" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="df6bef75ccfc0e57f5a353c8bd7ffab7e1302c42a02b8c84ad95efb2b1dd28e4" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="6399156c46f9933f038a8710575a4314aa4acef7011d6e024b079f404a324ea5" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="bf2fb483ac27632e6dd867c9bcaa63dc189732337878ea695a0bdca7fbcf7d55" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="844110fc9c791b8972f156f25cdbab3d71c5b2f59730d7a641218ecb82f3339d" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="c769d3c0295b7c7c2718ec2652f592b5f6348d97e5ef1196c31f877f2d93494c" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="eb9b7ec505b22945729972aec2fb1694b73871d40b90f35c90f06cd6ad386bf2" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="2947f4d09cdd8cb2bf3f1724ae30a41ca6418be0a835d6d63056c84af817d4b1" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="4779d0f98d1bcb82b2ff1cfd730a642c9130dd265501f67349fd6f9fcb63ca8d" name="libvirt-dbus" arch="x86_64">
  <version epoch="0" ver="1.4.1" rel="150300.1.1"/>
  <changelog author="lnussel@suse.de" date="1592395200">- initial package version 1.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1594123200">- spec: Switch from explicitly adding user:group to sysuser
  mechanism</changelog>
  <changelog author="lnussel@suse.de" date="1601899200">- Actually require sysuser package
- Backport patch from git to autostart dbus interface using systemd
  (libvirt-dbus-systemd.diff)</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- Fix syntax errors in system-user-libvirt-dbus.conf
  boo#1178530</changelog>
  <changelog author="jfehlig@suse.com" date="1622030400">- Add libvirtdbus user to libvirt group
  boo#1182538</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- Update to version 1.4.1:
  * Release of libvirt-dbus 1.4.1
  * tests: allow running our tests against installed libvirt-dbus
  * tests: report proper error if `abs_top_builddir` is not defined
  * gitlab: use --fatal-meson-warnings in builds
  * meson: add git_werror option and only set if -Dwerror is not set
  * meson: honour meson warning_level setting
  * gitlab: adapt to use meson for libvirt-glib build
  * ci: refresh containers for CentOS-8 PowerTools repo rename
  * gitlab: replace "libvirt-" prefix with "ci-" in dockerfiles
  * gitlab: refresh containers with lcitool for fully minimized base
  * Dropped patches: libvirt-dbus-systemd.diff
- Add source service file
- Change system-user-libvirt-dbus subpackage to noarch
- Require libvirt group in system-user-libvirt-dbus subpackage
  bsc#1196968</changelog>
</package>
<package pkgid="acc9d9d58d98f37922e0ecfae62b21565284f56a454d29250a1d16ef7f91a51a" name="libvirt-glib-1_0-0" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="1.95"/>
  <changelog author="zaitor@opensuse.org" date="1408536000">- Update to version 0.1.9:
  + Add support for spiceport chardev.
  + Misc fixes to build system.
  + Fix ref counting of snapshot devices.
  + Add API for deleting snapshots.
  + Fix RPM layout for vala files.
  + Fix race in build of vala code.
  + Add API for getting security models.
  + Add classes for dealing with CPU models.
  + Fix enum generation.
  + Add API for fetching snapshots.
- Drop 0b4d331b-secmodel-caps.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.2.0:
  + Support keyboard input device config.
  + Annotate some unused parameters.
  + Add support for new graphics attach API.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435233600">- Update to version 0.2.1:
  + Fix libtoolize detection in autogen.sh.
  + Allow storage volume format compatibility level to be set.
  + Add pre-condition checks to more public API entry points.
  + Don't try to return a value from void functions.
  + Add API for controlling storage pool autostart flag.
  + Add API for filesystem image format.
  + Add loop, nbd and ploop filesystem types.
  + Fix setting of driver type when called more than once.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1436270400">- Fix setting file system type and format.
  bsc#936841 46897c1b-fs-type-fix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 0.2.2:
  + Add API for getting interface MAC address.
  + Simplify implementation of object listing APIs.
  + Fix memory leaks of virConnect objects.
  + Port to use GTask instead of GSimpleAsyncResult.
  + Add API to get list of physical network interfaces.
  + Add API to get list of virtual networks.
  + Add API to get DHCP address of virtual networks.
  + Avoid overwriting filesystem type when setting format.
  + Include XML data for tests in dist.
  + Add support for UNIX chardev sources.
  + Fix test linking on platforms with strict linker deps.
  + Add ability to set video ram + vgamem.
- Drop 46897c1b-fs-type-fix.patch: Fixed upstream.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 0.2.3:
  + virt-admin and administration API.
  + Various improvements in virtio devices support.
  + Log daemon: logging improvements and protocol.
  + network: selectively disable -Wcast-align in
    virNetDevParseDadStatus.
  + log_manager: Include configmake.h last.
  + virtlogd:
  - Fix build without DBus.
  - Use %llu to print 64bit types.</changelog>
  <changelog author="zaitor@opensuse.org" date="1479211200">- Update to version 1.0.0:
  + Switch to new release numbering scheme, major digit incremented
    each year, minor for each release, micro for stable branches
    (if any).
  + Fix Libs.private variable in pkg-config file.
  + Fix git introspection warnings.
  + Add ability to set SPICE gl property.
  + Add support for virtio video model.
  + Add support for 3d accel property.
  + Add support for querying video model.
  + Add support for host device config for PCI devs.
  + Add docs for more APIs.
  + Avoid unused variable warnings.
  + Fix check for libvirt optional features to use pkg-config.
  + Delete manually written python binding. All apps should use
    PyGObject with gobject introspection.
  + Allow schema to be NULL on config objects.
  + Preserve unknown devices listed in XML.
  + Add further test coverage.
- Add gpg signed source.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 2.0.0:
  + Increase min libvirt to 1.2.5.
  + Increase min glib to 2.38.
  + Fix example program event detail strings.
  + Set LC_CTYPE=en_US.UTF-8 when running python apps.
  + Don't relay on non-portable paths.
  + Fix sha-bang lines for portability.
  + Remove bogus casts for g_object_ref args.
  + Disable -Wcast-function-type warnings.
  + Modernize gobject macro usage.
  + Allow adding namespace to child nodes.
  + Add ICH9 audio support.
  + Add API for getting machine type.
  + Updated translations.
- Add fdupes BuildRequires and macro: Remove duplicates.</changelog>
  <changelog author="jfehlig@suse.com" date="1575374400">- Update to version 3.0.0
  + Add support for bochs video device
  + Add API to query firmware config
  + Improve testing coverage
  + Validate min/max glib API versions in use
  + Remove deprecated G_PARAM_PRIVATE
  + Fix docs build linking problems
  + Convert python demos to be python 3 compatible &amp; use
    modern best practice for pyobject introspection bindings
  + Add API to query domain capaibilities
  + Refresh translations
  + Simplify build process for handling translations
  + Fix some memory leaks
  + Add API for setting storage volume features
  + boo#1158282</changelog>
</package>
<package pkgid="e469bfee360ac5dfe93e32ab77fd4db5bb8387a8340a37c41909038273c76ab4" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.26.1"/>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
</package>
<package pkgid="f8ac8056c20e675280a7f6ea5f419628aef6c1666c885c3832e73930ea78c314" name="libvisual" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="1.34"/>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="crrodriguez@suse.de" date="1226491200">- use -fno-strict-aliasing to avoid breakages.</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="anixx@opensuse.org" date="1308916800">- added a patch from Debian to fix build</changelog>
  <changelog author="mls@suse.de" date="1319198400">- do not use /usr/src/packages in specfile</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="dvaleev@suse.com" date="1343304000">- defining inline causes problems trying to build against
  libvisual headers</changelog>
  <changelog author="coolo@suse.com" date="1359806400">- update license to new format</changelog>
</package>
<package pkgid="c6ec251516c9ab3d3a3b71051fcbb473df77d8750e0e9815148523bd98014ddf" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="11.3.5" rel="13.1"/>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
</package>
<package pkgid="c4f2716b1a98a53234e1346a3a929894eeb53d1d72430baf53fdcecbe48527ef" name="libvorbis0" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="0151ad44a2fd1f92b87b3e4a584b6a33bcf6d00b539297dbe2fa849961c3b409" name="libvorbisenc2" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="4.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="4d504225f48be78121958cdd8f733bc212e6ab8a965f4e691b38d22717f4d97a" name="libwayland-client0" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="1.19"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
</package>
<package pkgid="9a4ebf4c8209b46601f12f94cfdbef6c54dc9edf2e33648105712465a12f0ec7" name="libwayland-cursor0" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="1.19"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
</package>
<package pkgid="22d667233d1323e66bd55e8fb09a6ad0b62ea03497443d82addf59d522b789e8" name="libwayland-egl1" arch="x86_64">
  <version epoch="0" ver="99~1.18.0" rel="1.19"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
</package>
<package pkgid="edcb07ef1977ddb862f43c26b22fdcd359251cbd79c9d631fbc2bdeb3177dcb1" name="libwayland-server0" arch="x86_64">
  <version epoch="0" ver="1.18.0" rel="1.19"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
</package>
<package pkgid="00192d1a40df0b836cc2ce9c229efd7e9e20bdf61c8baf07bbbe0a498676b2e5" name="libwrap0" arch="x86_64">
  <version epoch="0" ver="7.6" rel="1.433"/>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1335096000">- Refresh all patches
- Also, pass getconf LFS_CFLAGS into CFLAGS</changelog>
  <changelog author="jengelh@inai.de" date="1358683200">- Implement shared library packaging guidelines (split libwrap0)
- Parallel build with %_smp_mflags instead of %jobs
- Remove redundant %clean sections</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370260800">- tcpd-ocloexec.patch: Use O_CLOEXEC whenever neccesary,
  otherwise fd leaks will follow.</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Cleanup with spec-cleaner
- Remove obsolete sections of provides from 2k6
- Remove static library</changelog>
  <changelog author="okir@suse.com" date="1437393600">- Fix breakage of IPv6 address handling [bsc#914527, bsc#899185]
  Added patches:
  tcp_wrappers_7.6-ipv6-sockaddr-storage.patch
  tcp_wrappers_7.6-ipv6-subnet.diff
  tcp_wrappers_7.6-ipv6-host-match.patch
  tcp_wrappers_7.6-ipv6-mapped-v4.patch
- Re-added static library</changelog>
  <changelog author="kukuk@suse.de" date="1459944000">- tcp_wrappers_7.6.diff: don't use public headers for own
  functions, make own yp_get_default_domain static.</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- tcp_wrappers_7.6-optflags.diff: enable PIE for all binaries
  directly.</changelog>
</package>
<package pkgid="3c8ce4a668e2a24c38c2925dd7b4292fceed9ac75463075eb052614f498a5a7a" name="libx86emu3" arch="x86_64">
  <version epoch="0" ver="3.1" rel="1.23"/>
  <changelog author="snwint@suse.de" date="1553169600">- merge gh#wfeldt/libx86emu#14
- ops2: Add support for conditional move
- ops2: Implement bswap
- Add additional ops2 instructions
- 2.2</changelog>
  <changelog author="snwint@suse.de" date="1556107200">- merge gh#wfeldt/libx86emu#15
- include: Fix GCC strict-prototypes warning
- include: Fix 'multiple definition of' linker errors
- Small fixes
- 2.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1566302400">- merge gh#wfeldt/libx86emu#19
- decode: Fix compiler warning
- 2.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579176000">- merge gh#wfeldt/libx86emu#26
- add '--32' option to demo program to start in 32-bit mode
- 2.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579262400">- merge gh#wfeldt/libx86emu#24
- ops2: Add cpuid support using a new handler
- ops2: Introduce a callback function for MSR access
- Push cpuid msr callback</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579262401">- merge gh#wfeldt/libx86emu#21
- prim_ops: Fix compiler warning</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579262402">- merge gh#wfeldt/libx86emu#22
- decode: Prepare for SSE support
- ops2: Add SSE instructions
- ops2: Add packed SSE ops
- Minimal SSE support</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579262403">- merge gh#wfeldt/libx86emu#17
- Introduce LDFLAGS variable in Makefiles
- test: Link with the development version of the library
- test: Sort tests by name
- Add Travis CI configuration file and a badge in the README
- Travis CI integration
- 2.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1580126400">- merge gh#wfeldt/libx86emu#27
- rework (i)div and (i)mul instructions
- fix typo
- add (i)div opcode tests
- rework (i)mul instructions to set flags correctly
- add (i)mul tests
- 3.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1580212800">- merge gh#wfeldt/libx86emu#28
- update README to explain about library versions
- adjust code to compile with older C standards
- 3.1</changelog>
</package>
<package pkgid="a46122646334f36c780967e8b7b9a79f8599e830d82da4a71c204d2064de9eee" name="libxcb-render0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="3.7.1"/>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="b98cb8dad1b69cf3e4d9db55aadfa417be8e81e8e5378414ceb52e48401c3b46" name="libxcb-shm0" arch="x86_64">
  <version epoch="0" ver="1.13" rel="3.7.1"/>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="d46f8cc697cfaaa4fee2d7aa6df89ecbb9d660743e1d8f34011458b2fb6d6b98" name="libxcb1" arch="x86_64">
  <version epoch="0" ver="1.13" rel="3.7.1"/>
  <changelog author="eich@suse.com" date="1450872000">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch:
  If auth with credentials for hostname fails retry with XAUTHLOCALHOSTNAME
  (boo#906622).</changelog>
  <changelog author="sndirsch@suse.com" date="1463659200">- Update to version 1.12
  * here is a new version of libxcb for you to enjoy. The
    highlights are the same as for the new xcb-proto release:
    xinput support, RandR 1.5 and an automatic alignment checker.
- removed libxcb-xevie0/libxcb-xprint0 subpackages</changelog>
  <changelog author="msrb@suse.com" date="1512043200">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Modify this patch to do what it say - retry not only if the current hostname is
    not found in the xauthority file, but also when it is rejected by X server.
    (bnc#1043221)</changelog>
  <changelog author="sndirsch@suse.com" date="1512993600">- fixes build against python3 (package rename of
  python-xcb-proto-devel to python3-xcb-proto-devel)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1513771200">- Use spaces instead of tabs in the patches (as does the original
  source code) to avoid confusion.
- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * If authentication (with *stage == 0) failed and the variable
    XAUTHLOCALHOSTNAME wasn't set, we were never getting to stage 2
    in the original patch, causing calls to xcb_connect_to_display
    to be stuck in an infinite loop.
    Now we also go to stage 2 if the variable isn't set.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- n_If-auth-with-credentials-for-hostname-fails-retry-with-XAUTHLOCALHOSTNAME.patch
  * Prevent infinite loop also in case DISPLAY is non-local.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Enable xinput extension. (bnc#1074249)
- U_add-support-for-eventstruct.patch
  * Update xinput to the state when it was enabled by default
    upstream.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Really conditionalize the python3 option to allow us building
  without any python2 present
  * u_build_python3.patch
- Convert to pkgconfig style deps
- Format bit with spec-cleaner</changelog>
  <changelog author="sndirsch@suse.com" date="1520251200">- Update to version 1.13
  * As with xcb-proto, this release mainly enables multi-planar buffers in
    DRI3 v1.2 via support for variable-sized lists of FDs, and enables
    sending GenericEvents to other clients. Present v1.2 and RandR v1.6
    did not require any specific library changes.
- supersedes U_add-support-for-eventstruct.patch,
  u_build_python3.patch</changelog>
  <changelog author="msrb@suse.com" date="1534248000">- u_don-t-flag-extra-reply-in-xcb_take_socket.patch
  * Fix IO errors with KWin in combination with NVIDIA driver.
    (bnc#1101560)</changelog>
</package>
<package pkgid="04dd798429bdd1fdd2369cece3f2c9d4fabec7c1ab08d9aa542a8fb809924f2a" name="libxcrypt-devel" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.2.41"/>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
</package>
<package pkgid="6799b5cd5bbae7da707f8ef01b91e22c58444848619f1f8ef3ab0b53c152ff8f" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1410436800">- Add commentary about upcoming symbol version support to
  .spec file.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1415016000">- Update to version 0.5.0:
  * Added support for Compose/dead keys in a new module (included in
  libxkbcommon). See the documentation or the
  xkbcommon/xkbcommon-compose.h header file for more details.
  * Improved and reordered some sections of the documentation.
  * The doxygen HTML pages were made nicer to read.
  * Most tests now run also on non-linux platforms.
  * A warning is emitted by default about RMLVO values which are not
  used during keymap compilation, which are most often a user
  misconfiguration. For example, "terminate:ctrl_alt_backspace"
  instead of "terminate:ctrl_alt_bksp".
  * Added symbol versioning for libxkbcommon and libxkbcommon-x11.
  Note: binaries compiled against this and future versions will not
  be able to link against the previous versions of the library.
  * Removed several compatablity symbols from the binary (the API
  isn't affected). This affects binaries which:
  1. Were compiled against a pre-stable (&lt;0.2.0) version of
  libxkbcommon, and
  2. Are linked against the this or later version of libxkbcommon.
  Such a scenario is likely to fail already.
  * If Xvfb is not available, the x11comp test is now correctly
  skipped instead of hanging.
  * Benchmarks were moved to a separate bench/ directory.
  * Build fixes from OpenBSD.
  * Fixed a bug where key type entries such as "map[None] = Level2;"
  were ignored.
  * New API:
  XKB_COMPOSE_*
  xkb_compose_*</changelog>
  <changelog author="mlin@suse.com" date="1446465600">- Requires xkeyboard-config, bsc#952403
  * libxkbcommon should brings xkeyboard-config together always as
    libxkbcommon does not distribute xkb data itself, and especially
    requires xkeyboard-config for any rely on libxkbcommon in the
    minimal system.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460116800">- Update to version 0.6.1:
  * Add LICENSE to distributed files in tarball releases.
  * Minor typo fix in xkb_keymap_get_as_string() documentation.
- Changes from version 0.6.0:
  * If the XKB_CONFIG_ROOT environment variable is set, it is used
    as the XKB configuration root instead of the path determined at
    build time.
  * Tests and benchmarks now build correctly on OSX.
  * An XKB keymap provides a name for each key it defines.
    Traditionally these names are limited to at most 4 characters,
    and are thus somewhat obscure, but might still be useful
    (xkbcommon lifts the 4 character limit).
  * The new functions xkb_keymap_key_get_name() and
    xkb_keymap_key_by_name() can be used to get the name of a key
    or find a key by name. Note that a key may have aliases.
  * Documentation improvements.
  * New API:
    + xkb_keymap_key_by_name().
    + xkb_keymap_key_get_name().</changelog>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
</package>
<package pkgid="6b6c4c4c09eccc1534a2815e805ef7e94ccb5bce92d20453b3fe4f022ea873b1" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="177201032ce97cc630efe6e61c0c092dc63a6f642c16c6b5103422325b489f2d" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="d0cb3885f53002eac66a97d91b80a77e45b218363aff9cae231cc622936f94c4" name="libxmlsec1-1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="7.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="e5cf39e294e756bdbb115caedac97ea18d479587762dec323e55de9483452c33" name="libxmlsec1-openssl1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="7.9.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="4e587060442a62c29773db167a6ca367872cf17e73f808889d09437444dd0d4b" name="libxslt1" arch="x86_64">
  <version epoch="0" ver="1.1.32" rel="3.8.24"/>
  <changelog author="pgajdos@suse.com" date="1491393600">- security update: initialize random generator, CVE-2015-9019
  [bsc#934119]
  + libxslt-random-seed.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493121600">- Fixed CVE-2017-5029 bcs#1035905
  * Limit buffer size in xsltAddTextString to INT_MAX
- Added patch libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
</package>
<package pkgid="157f8dd581600713ace5ee06918a7e5cde6d0dd0c960ab12de92b15e95fa384c" name="libxtables12" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.8.2
  * Fix incorrect handling of various targets and options in
    iptables-nft,ebtables-nft,arptables-nft.</changelog>
  <changelog author="kstreitova@suse.com" date="1554379200">- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
  where 'iptables -L' reads garbage from the struct as the kernel
  never filled it in the bugged case. This can lead to issues like
  mapping a few TiB of memory [bsc#1106751].</changelog>
  <changelog author="jengelh@inai.de" date="1558526400">- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
  0001-include-extend-the-headers-conflict-workaround-to-in.patch
  to fix build with older linux-glibc-devel. [boo#1132821]</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.8.3
  * ebtables: Fix rule listing with counters
  * ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
  0001-include-fix-build-with-kernel-headers-before-4.2.patch
  (upstreamed)</changelog>
  <changelog author="kstreitova@suse.com" date="1567771200">- add missing Provides/Obsoletes for the renamed package
  iptables-backend-nft (was iptables-nft)</changelog>
  <changelog author="kstreitova@suse.com" date="1569844800">- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.8.4
  * Fix for wrong counter format in `ebtables-nft-save -c` output.
  * Print typical iptables-save comments in arptables- and
    ebtables-save, too.
  * xt_owner: add --suppl-groups option
  * Remove support for /etc/xtables.conf
  * Restore support for "-4" and "-6" options in rule lines.</changelog>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
</package>
<package pkgid="219d517a5f2a1c85e558baedb8035d4178e44dfaad85775a9e207c91ac57c1e6" name="libyajl2" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="2.12"/>
  <changelog author="jfehlig@novell.com" date="1302696000">- Add filters to rpmlintrc
- spec file: Document githash usage in tarbal name</changelog>
  <changelog author="jfehlig@novell.com" date="1302696001">- Add filters to rpmlintrc
- spec file: Document githash usage in tarbal name</changelog>
  <changelog author="jfehlig@novell.com" date="1307016000">- Add man pages for json_{reformat,verify}</changelog>
  <changelog author="mrueckert@suse.de" date="1313150400">- update to 2.0.1
  - lth generator flag to allow client to specify they want escaped
    solidi '/'.  issue #28
  - lth crash fix when yajl_parse() is never called. issue #27
- additional changes from 2.0.0
  - lth YAJL is now ISC licensed:
    http://en.wikipedia.org/wiki/ISC_license
  - lth 20-35% (osx and linux respectively) parsing performance
    improvement attained by tweaking string scanning (idea:
    @michaelrhanson).
  - Florian Forster &amp; lth - yajl_tree interface introduced as a
    higher level interface to the parser (eats JSON, poops a memory
    representation)
  - lth require a C99 compiler
  - lth integers are now represented with long long (64bit+) on all
    platforms.
  - lth size_t now used throughout to represent buffer lengths, so
    you can safely manage buffers greater than 4GB.
  - gno semantic improvements to yajl's API regarding partial value
    parsing and trailing garbage
  - lth new configuration mechanism for yajl, see yajl_config() and
    yajl_gen_config()
  - gno more allocation checking in more places
  - gno remove usage of strtol, replace with custom implementation
    that cares not about your locale.
  - lth yajl_parse_complete renamed to yajl_complete_parse.
  - lth add a switch to validate utf8 strings as they are
    generated.
  - lth tests are a lot quieter in their output.
  - lth addition of a little in tree performance benchmark,
    `perftest` in perf/perftest.c
- additional changes from 1.0.12
  - Conrad Irwin - Parse null bytes correctly
  - Mirek Rusin - fix LLVM warnings
  - gno - Don't generate numbers for keys. closes #13
  - lth - various win32 fixes, including build documentation
    improvements
  - John Stamp - Don't export private symbols.
  - John Stamp - Install yajl_version.h, not the template.
  - John Stamp - Don't use -fPIC for static lib.  Cmake will
    automatically add it for the shared.
  - lth 0 fix paths embedded in dylib upon installation on osx.
    closes #11
- refreshed optflags patch</changelog>
  <changelog author="mrueckert@suse.de" date="1313496000">- bump baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
</package>
<package pkgid="735b3a14ccf5a2e38d26ddb743ce32389b101472bab54a4d0cfe8d4ea907e08d" name="libyaml-cpp0_6" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="4.2.1"/>
  <changelog author="i@marguerite.su" date="1372507200">- update version 0.5.1
  * a bug fix release for the new API</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372766400">- Added boost-devel in yaml-cpp-devel Requires: (some yaml-cpp headers require
  boost headers).</changelog>
  <changelog author="rpm@fthiessen.de" date="1438430400">- Update version 0.5.2
  * Some bugfixes
- Updated spec file
  * Using cmake macro
  * Updated copyright.</changelog>
  <changelog author="tchvatal@suse.com" date="1447416000">- Add patch to fix wrong node behaviour in 0.5.2 bnc#954749:
  * fix-node-regression.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update to 0.5.3
  * Bugfix release.
  * This will be the last release that does not require C++11.
- Drop upstreamed fix-node-regression.patch
- Small spec file cleanups</changelog>
  <changelog author="tchvatal@suse.com" date="1468238400">- Fix building with updated cmake and wrong -fPIE parsing:
  * yaml-cpp-disable-bundled-gmock.patch
  * yaml-cpp-fix-pie.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517400000">- Update to version 0.6.0
  * yaml-cpp no longer depends on Boost
  * Requires C++11
  * Some bug fixes and performance improvements
- Dropped patch yaml-cpp-disable-bundled-gmock.patch since it can
  be configured with the option YAML_CPP_BUILD_TESTS</changelog>
  <changelog author="tchvatal@suse.com" date="1517572800">- Update to 0.6.1:
  * Just brownpaperbag over previous release</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1518609600">- Security fix: [bsc#1032144, CVE-2017-5950]
  * Stack overflow in SingleDocParser::HandleNode() function
  * Added patch yaml-cpp-CVE-2017-5950.patch</changelog>
</package>
<package pkgid="8706f048a695161f6eb0724f6adc8db95201fa6a602ab110f49ac5589dfa8340" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="3.26.10"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
</package>
<package pkgid="2ac4280e3cedecdf19a009397493c8413049721e2e786466d764d4c7ea4b902f" name="libzio1" arch="x86_64">
  <version epoch="0" ver="1.06" rel="2.20"/>
  <changelog author="jengelh@inai.de" date="1357560000">- Specify a BuildRoot, which is mandatory for old RPM (like SLE)</changelog>
  <changelog author="werner@suse.de" date="1361880000">- Add patch libzio-1.00.dif: fix seeking cookie functions (related
  to bnc#805149) that is handle fseek() correct for bzip2 and lzma/xz</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 1.02
  * Fixed version: handle fseek() correct for bzip2 and lzma/xz
- Spec file cleanup
- Remove libzio-1.00.dif; fixed on upstream release</changelog>
  <changelog author="werner@suse.de" date="1488196800">- Use -D_DEFAULT_SOURCE</changelog>
  <changelog author="schwab@linux-m68k.org" date="1488283200">- Add pthread-sigmask.patch to include &lt;signal.h&gt; as required
  by pthread_sigmask</changelog>
  <changelog author="werner@suse.de" date="1488283201">- Push version to 1.04
  * Add patch from Andreas Schwab to fix problem with missing
  declaration of pthread_sigmask(2)
- Delete pthread-sigmask.patch as now upstream</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Push to version 1.05
  * Avoid that writer of fopencookie(3) will return less than
    the initial buffer size.
  * Make sure that MIN macro is defined if used.
  * Some minor changes as well.</changelog>
  <changelog author="werner@suse.de" date="1515499200">- Version 1.06: Add changes from Jerrell Watts which has kindly
  provided his changes for lzma/xz support with large I/O buffers</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
</package>
<package pkgid="7969605c576736620de60831f4bd480df3987d90225fdd2c5c88ac5939b5f3f3" name="libzmq5" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="3.15.4"/>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
  <changelog author="adam.majer@suse.de" date="1547467200">- CVE-2019-6250.patch: fix a remote execution vulnerability due to
  pointer arithmetic overflow (bsc#1121717, CVE-2019-6250)</changelog>
  <changelog author="astieger@suse.com" date="1547726400">- mark license files using %license macro (bsc#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1562155200">- CVE-2019-13132.patch: Fix an unauthenticated remote code execution
  due to a stack overflow on the server (bsc#1140255, CVE-2019-13132)</changelog>
  <changelog author="adam.majer@suse.de" date="1599480000">- CVE-2020-15166.patch: fix the possibility of unauthenticated
  clients causing a denial-of-service (bsc#1176116, CVE-2020-15166)</changelog>
  <changelog author="adam.majer@suse.de" date="1601640000">- bsc1176256.patch: fix heap overflow when receiving malformed
  ZMTP v1 packets (bsc#1176256)
- bsc1176257.patch: fixes a memory leak in client induced by
  malicious server(s) without CURVE/ZAP (bsc#1176257)
- bsc1176259.patch: fix memory leak when processing PUB messages
  with metadata (bsc#1176259)
- bsc1176258.patch: fix stack overflow in PUB/XPUB subscription
  store (bsc#1176258)</changelog>
</package>
<package pkgid="03b27477aab4632a4977c87d62326794f97ce029cc86acb052f3ecbb44edfb79" name="libzstd1" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="1.6.1"/>
  <changelog author="mliska@suse.cz" date="1556280000">- Use FAT LTO objects in order to provide proper static library (boo#1133297).</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Update description with 1.4.0 statistics.</changelog>
  <changelog author="idonmez@suse.com" date="1560513600">- Remove googletest-devel BuildRequires and pzstd-global-gtest.patch
  because we want zstd in ring0 (due to rpm's zstd payload support)
  Since googletest is only used in build time (it's for testing after
  all), this should be fine.</changelog>
  <changelog author="dimstar@opensuse.org" date="1562846400">- Add baselibs.conf: libarchive gained zstd support and provides
  - 32bit libraries. This means, zstd also needs to provide -32bit
  libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1563796800">- Update to version 1.4.1:
  * bug: Fix data corruption in niche use cases by @terrelln (#1659)
  * bug: Fuzz legacy modes, fix uncovered bugs by @terrelln (#1593, #1594, #1595)
  * bug: Fix out of bounds read by @terrelln (#1590)
  * perf: Improve decode speed by ~7% @mgrice (#1668)
  * perf: Slightly improved compression ratio of level 3 and 4 (ZSTD_dfast) by @cyan4973 (#1681)
  * perf: Slightly faster compression speed when re-using a context by @cyan4973 (#1658)
  * perf: Improve compression ratio for small windowLog by @cyan4973 (#1624)
  * perf: Faster compression speed in high compression mode for repetitive data by @terrelln (#1635)
  * api: Add parameter to generate smaller dictionaries by @tyler-tran (#1656)
  * cli: Recognize symlinks when built in C99 mode by @felixhandte (#1640)
  * cli: Expose cpu load indicator for each file on -vv mode by @ephiepark (#1631)
  * cli: Restrict read permissions on destination files by @chungy (#1644)
  * cli: zstdgrep: handle -f flag by @felixhandte (#1618)
  * cli: zstdcat: follow symlinks by @vejnar (#1604)
  * doc: Remove extra size limit on compressed blocks by @felixhandte (#1689)
  * doc: Fix typo by @yk-tanigawa (#1633)
  * doc: Improve documentation on streaming buffer sizes by @cyan4973 (#1629)
  * build: CMake: support building with LZ4 @leeyoung624 (#1626)
  * build: CMake: install zstdless and zstdgrep by @leeyoung624 (#1647)
  * build: CMake: respect existing uninstall target by @j301scott (#1619)
  * build: Make: skip multithread tests when built without support by @michaelforney (#1620)
  * build: Make: Fix examples/ test target by @sjnam (#1603)
  * build: Meson: rename options out of deprecated namespace by @lzutao (#1665)
  * build: Meson: fix build by @lzutao (#1602)
  * build: Visual Studio: don't export symbols in static lib by @scharan (#1650)
  * build: Visual Studio: fix linking by @absotively (#1639)
  * build: Fix MinGW-W64 build by @myzhang1029 (#1600)
  * misc: Expand decodecorpus coverage by @ephiepark (#1664)</changelog>
  <changelog author="bwiedemann@suse.com" date="1564142400">- Update to version 1.4.2:
  * bug: Fix bug in zstd-0.5 decoder by @terrelln (#1696)
  * bug: Fix seekable decompression in-memory API by @iburinoc (#1695)
  * bug: Close minor memory leak in CLI by @LeeYoung624 (#1701)
  * misc: Validate blocks are smaller than size limit by @vivekmig (#1685)
  * misc: Restructure source files by @ephiepark (#1679)</changelog>
  <changelog author="bwiedemann@suse.com" date="1564488000">- Add disk _constraints to fix ppc64le build</changelog>
  <changelog author="idonmez@suse.com" date="1566302400">- Update to version 1.4.3
  * bug: Fix Dictionary Compression Ratio Regression (#1709)
  * bug: Fix Buffer Overflow in v0.3 Decompression (#1722)
  * build: Add support for IAR C/C++ Compiler for Arm (#1705)
  * misc: Add NULL pointer check in util.c (#1706)</changelog>
  <changelog author="idonmez@suse.com" date="1572955200">- Update to version 1.4.4
  * perf: Improved decompression speed, by &gt; 10%
  * perf: Better compression speed when re-using a context
  * perf: Fix compression ratio when compressing large files with
    small dictionary
  * perf: zstd reference encoder can generate RLE blocks
  * perf: minor generic speed optimization
  * api: new ability to extract sequences from the parser for analysis
  * api: fixed decoding of magic-less frames
  * api: fixed ZSTD_initCStream_advanced() performance with fast modes
  * cli: Named pipes support
  * cli: short tar's extension support
  * cli: command --output-dir-flat=DIE , generates target files into
    requested directory
  * cli: commands --stream-size=# and --size-hint=#
  * cli: command --exclude-compressed
  * cli: faster -t test mode
  * cli: improved some error messages
  * cli: fix rare deadlock condition within dictionary builder
  * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2,
    ZSTD_CDict, function deprecation, zstd format
  * misc: fixed educational decoder : accept larger literals section,
    and removed UNALIGNED() macro
- Refresh pzstd.1.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1615464000">- Add 0001-PATCH-Use-umask-to-Constrain-Created-File-Permission.patch
  fixing (CVE-2021-24031, bsc#1183371) and (CVE-2021-24032, bsc#1183370).
  Use umask() to constrain created file permission.</changelog>
</package>
<package pkgid="4eec49c80606f2083f7905837d71df06de2f768d1d66207f6603f87e2b435654" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.29.4" rel="31.1"/>
  <changelog author="ma@suse.de" date="1631880000">- Make sure to keep states alives while transitioning
  (bsc#1190199)
- May set techpreview variables for testing in /etc/zypp/zypp.conf.
  If environment variables are unhandy one may enable the desired
  techpreview in zypp.conf as well:
    [main]
    techpreview.ZYPP_SINGLE_RPMTRANS=1
    techpreview.ZYPP_MEDIANETWORK=1
- version 17.28.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1633348800">- Downloader does not respect checkExistsOnly flag (bsc#1190712)
  A missing check causes zyppng::Downloader to always download full
  files even if the checkExistsOnly flag is set. This patch adds
  the missing logic.
- Fix kernel-*-livepatch removal in purge-kernels (bsc#1190815)
  The kernel-*-livepatch packages are supposed to serve as a stable
  handle for the ephemeral kernel livepatch packages. See
  FATE#320268 for details. As part of the kernel live patching
  ecosystem, kernel-*-livepatch packages should not block the
  purge-kernels step.
- version 17.28.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Zypper should keep cached files if transaction is aborted
  (bsc#1190356)
  Singletrans mode currently does not keep files around if the
  transaction is aborted. This patch fixes the problem.
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high
  (bsc#1191324)
  Especially in a VM iterating over all possible fd's to close open
  ones right before a exec() slows down zypper unnecessarily. This
  patch uses /proc/self/fd to iterate over open fd's in case rlimit
  is above 1024.
- po: Fix some lost '%' signs in positional args (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is
  plugin: (bsc#1191286)
- version 17.28.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1636027200">- Check log writer before accessing it (fixes #355, bsc#1192337)
- Save locks: Update an existing locks changed comment string.
- Allow uname-r format in purge kernels keepspec (fixes
  openSUSE/zypper#418)
- version 17.28.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1636632000">- Disable logger in the child after fork (bsc#1192436)
- version 17.28.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Use the default zypp.conf settings if no zypp.conf exists
  (bsc#1193488)
- Fix wrong encoding of iso: URL components (bsc#954813)
- Handle armv8l as armv7hl compatible userland.
- Introduce zypp-curl a sublibrary for CURL related code.
- zypp-rpm: Increase rpm loglevel if ZYPP_RPM_DEBUG is set.
- Save all signatures associated with a public key in its
  PublicKeyData.
- version 17.29.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1641816000">- Fix broken install path for parser compat headers (fixes #372,
  bsc#1194597)
- RepoManager: remember exec errors in exception history
  (bsc#1193007)
- version 17.29.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1642680000">- Fix Legacy include (bsc#1194597)
- version 17.29.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1643716800">- Public header files on older distros must use c++11
  (bsc#1194597)
- Fix exception handling when reading or writing credentials
  (bsc#1194898)
- version 17.29.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1644321600">- Fix handling of redirected command in-/output (bsc#1195326)
  This fixes delays at the end of zypper operations, where
  zypper unintentionally waits for appdata plugin scripts to
  complete.
- version 17.29.4 (22)</changelog>
</package>
<package pkgid="25e514c8443701ba60a1e5a38cef7bb7343948f1977aedee13215e00f7eab53f" name="linux-glibc-devel" arch="x86_64">
  <version epoch="0" ver="5.3" rel="3.2.10"/>
  <changelog author="bwiedemann@suse.com" date="1531396800">- Don't embed build system's kernel version in rpm
  to make package build reproducible (boo#1101107)</changelog>
  <changelog author="schwab@suse.de" date="1531742400">- Don't do any expansion on the version.h contents</changelog>
  <changelog author="schwab@suse.de" date="1534161600">- Update to kernel headers 4.18</changelog>
  <changelog author="schwab@suse.de" date="1540209600">- Update to kernel headers 4.19</changelog>
  <changelog author="jslaby@suse.cz" date="1540382400">- fix netfilter builds with 4.19
  * add netfilter-bridge-define-INT_MIN-INT_MAX-in-userspace.patch</changelog>
  <changelog author="schwab@suse.de" date="1546862400">- Update to kernel headers 4.20
- netfilter-bridge-define-INT_MIN-INT_MAX-in-userspace.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1554811200">- Update to kernel headers 5.0</changelog>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
</package>
<package pkgid="f29a0f47e440c15a3ff948a5734954cb71831fd6ae8885e5226d57e5cc617aaf" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="150300.4.3.8"/>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
</package>
<package pkgid="63592f74205b0227d44774a505ade7cb38e4bb6f32c2d38703c1db8eee975688" name="logrotate" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="4.3.9"/>
  <changelog author="dimstar@opensuse.org" date="1475496000">- Add logrotate-fix-test62_with_bash-4.4.patch: Fix the test suite
  when running with bash 4.4 (gh#logrotate/logrotate#66).</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Version update to 3.10.0 fate#322037:
  * Update url to point to github
- Remove upstreamed patch:
  * logrotate-3.7.8-mess_err.patch
- Rebase patches:
  * logrotate-3.7.8-suse.patch
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-fix-test62_with_bash-4.4.patch</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move logrotate.status to /var/lib/misc following FHS/LSB and
  making implementing read-only root filesystem much easier.
  [FATE#322036]
- Add patch:
  * logrotate-var-lib-misc.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1479729600">- Fix post scriptlet condition bnc#1011120</changelog>
  <changelog author="tchvatal@suse.com" date="1482926400">- Version update to 3.11.0:
  * Merges from distribution patchsets and small fixes around
- Remove all patches merged upstream:
  * logrotate-addextension.patch
  * logrotate-autoext.patch
  * logrotate-conf.patch
  * logrotate-fix-test62_with_bash-4.4.patch
  * logrotate-manpage_config_clarification.patch
  * logrotate-var-lib-misc.patch
  * logrotate-3.7.8-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Remove aaa_base compat setting that is from 2003, we do not
  support such migration anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1499428801">- Version update to 3.12.3:
  * Fixed accident removal of rotated files with dateext. (#118)
  * Line comments inside globs in config files are now skipped. (#109)
  * logrotate now recovers from a corrupted state file. (#45)
  * createolddir now creates old directory as unprivileged user. (#114)
  * weekly rotations are now predictable and configurable. (#93)
  * Errors in config files are no longer treated as fatal errors. (#81)
  * configure --with-default-mail-command specifies default mail command. (#100)
  * Fixed heap buffer overflow when parsing crafted config file. (#33)
  * build fixes related to -Werror (#119) and -Werror=format= (#108)
  * configure --enable-werror now controls use of the -Werror flag (#123)
  * copy and copytruncate directives now work together again
  * unlink() is no longer preceded by open() unless shred is enabled (#124)
  * compress and uncompress now take commands from $PATH, too (#122)
- By default disable werror while building</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515153600">- Version update to 3.13.0:
  * make distribution tarballs report logrotate version properly
  * make (un)compress work even if stdin and/or stdout are closed (#154)
  * remove -s from DEFAULT_MAIL_COMMAND and improve its documenation (#152)
  * uncompress logs before mailing them even if delaycompress is enabled (#151)
  * handle unlink of a non-existing log file as a warning only (#144)
  * include compile-time options in the output of logrotate --version (#145)
  * make logrotate --version print to stdout instead of stderr (#145)
  * flush write buffers before syncing state file (#148)
  * specify (un)compress utility explicitly in tests (#137)
  * enable running tests in parallel (#132)
  * explicitly map root UID/GID to 0 on Cygwin (#133)
  * add .dpkg-bak and .dpkg-del to default tabooext list (#134)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1528372800">- Add "Environment=HOME=/root" to logrotate.service file in order
  to allow mariadb to rotate its logs when the database has a root
  password defined [bsc#1093617]
- Added patch:
  * logrotate-3.13.0-systemd_add_home_env.patch</changelog>
</package>
<package pkgid="606581987a92e10d276ee60d834f22c4afbcffd5d7b93b38439b7630ccc02730" name="lshw" arch="x86_64">
  <version epoch="0" ver="B.02.19.2+git.20210619" rel="3.9.1"/>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
</package>
<package pkgid="ca4d45f1cbce2a017b9287ff71c2808fc162efe3f51a143ffa7cc6a2e551d57f" name="lsof" arch="x86_64">
  <version epoch="0" ver="4.91" rel="1.11"/>
  <changelog author="ro@suse.de" date="1309176000">- change perl reference to /usr/bin/perl which actually exists</changelog>
  <changelog author="puzel@novell.com" date="1313496000">- repack the tarball to remove legally problematic files
  (bnc#705143)</changelog>
  <changelog author="cfarrell@suse.com" date="1332763200">- license update: Zlib
  lsof license is most similar to Zlib (also use SPDX format)</changelog>
  <changelog author="p.drouand@gmail.com" date="1425211200">- Update to version 4.88
  * Reduced to 50 the number of open file descriptors lsof attempts
    to close while trying to protect itself from a file descriptor
    exec() attack.  This limits the overhead lsof incurs on systems
    that have large file descriptor limits, yet provides sufficient
    open descriptors for the library functions lsof calls.
  * Updated for changes in FreeBSD 10.  Taught Configure to recognize
    FreeBSD 8.4.
  * lsof for Solaris 10 or 11 is no longer supported.
  * Initialized local variables in the Linux process_id() function.
  * Added support for FreeBSD 11.
  * Updated FreeBSD ZFS Configure stanza to supply a dummy opt_kdtrace.h
    when needed.
  * Added tmpfs file system support for FreeBSD.
  * Since a test system is no longer available, dropped the claim of
    FreeBSD 4.9 support.
  * Added the +|-E options for Linux.  -E displays endpoint info; +E
    displays endpoint info and endpopint files.
  * Fixed a Linux bug handling processes whose command includes a
    non-printing character, particularly a NEWLINE character, and
    clarified printing of single '\\' characters in command and file names.
  * Added support for Linux RDMA and CRYPTO protocal names and UNIX
    socket type
  * Fixed field output to insure that the field descriptor field is
    always selected, since it identifies the file set.
- Spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1462190400">- Update to version 4.89
  * Applied correction from Casper Dik &lt;Casper.Dik@oracle.com&gt; to
    his patch for Solaris 11 that I applied incorrectly in revision
    4.88.
  * Updated for latest version of FreeBSD 11.0-CURRENT.
  * Compensated for a missing FreeBSD 10.0 typedef of bool on the
    i386 architecture.  Allen Hewes &lt;rallenh@hotmail.com&gt; provided
    a test system. Andrey Chernov &lt;ache@freebsd.org&gt; provided
    useful advice.
  * Improved tests/Add2TestDB script with a patch from Peter
    Schiffer &lt;pschiffe@redhat.com&gt;.  Added patches from Peter to
    eliminate Linux gcc warnings.  Updated Lsof.8 with improvements
    supplied by Bjarni Ingi Gislason &lt;bjarniig@rhi.hi.is&gt;.
  * Changed FreeBSD global CFLAGS extraction per Terry Kennedy
    &lt;TERRY@tmk.com&gt;.  Also made sure -DNEEDS_BOOL_TYPEDEF is
    [#]define'd when the resulting CFLAGS doesn't contain it.  Terry
    reported that need.
  * Improved Linux test for tcp.h in response to a report from
    Cato Auestad &lt;cato@cato.ninja&gt;.  Cato did the testing.
  * Fixed Linux UNIX socket search by name bug reported by
    Stephane Chazelas &lt;stephane.chazelas@gmail.com&gt;.
  * Added Linux display of UNIX socket endpoint information with
    code provided by Masatake YAMATO &lt;yamato@redhat.com&gt;.  Peter
    Schiffer &lt;pschiffe@redhat.com&gt; provided a test system.
  * Insured that type definitions from &lt;vm/vm.h&gt; were again made
    visible to lsof on FreeBSD 11 after a system header file change
    hid them.
- use spec-cleaner to clean specfile</changelog>
  <changelog author="kstreitova@suse.com" date="1462449600">- submit utilities/lsof package to SUSE:SLE-12-SP2:GA [fate#320541]</changelog>
  <changelog author="kstreitova@suse.com" date="1472212800">- add lsof_4.89-nfs_hanging.patch to prevent 'lsof -b' from hanging
  when NFS server is unavailable [bsc#995061]</changelog>
  <changelog author="kstreitova@suse.com" date="1472472000">- modify lsof_4.89-nfs_hanging.patch and add a check for HasNFS
  variable as HasNFS may already have been set to 2 in the
  readmnt() function [bsc#995061]</changelog>
  <changelog author="kstreitova@suse.com" date="1519041600">- Update to version 4.90 [bsc#1081562]
  * Taught the Configure script to create a dummy opt_random.h
    for FreeBSD systems whose &lt;sys/random.h&gt; includes it.
  * Added support for the FreeBSD ZFUSE file system.
  * Corrected the quoting in a Darwin putchar() statement in the
    dfile.c source file.
  * Added support for the FreeBSD DTYPE_PTS file descriptor and
    for unknown descriptors that reference the kernel's badfileops
    operation switch.  Enabled FreeBSD 12.0 support.
  * Enhanced -K option with the form "-K i" to direct lsof to
    (i)gnore tasks. Linux task reports now include both
    process and task command names, making lsof's "-c &lt;name&gt;"
    option work correctly.
  * Added a patch to prevent NFS blocking in Linux
  * Installed a FreeBSD patch that prevents examining a TCP state
    structure during a race condition.
  * Updated FreeBSD for new UFS inode structure that lacks an i_dev
    member in the most recent 12.0-CURRENT.
  * Added "#define KLD_MODULE" to dlsof.h and dnode2.c to prevent
    &lt;machine/cpuconf.h&gt; from generating an "ARM_NARCH is 0" error.
    This is needed so lsof can access kernel structures.
  * Added recognition of the FreeBSD 11 file system name "nullfs".
  * Added a patch that is needed on FreeBSD 12 so the lsof
    compilation can obtain the inpcb and tcpcb structures from
    their respective header files. Updated FreeBSD dmnt.c for the
    ino64 changes.
  * Inserted a patch for Solaris 12.x to avoid compilation errors
    from &lt;sys/aio_req.h&gt;.
  * Added performance enhancement that uses the FreeBSD closefrom()
    and dup2() C library functions when available.
  * Corrected FreeBSD lsof's gathering of ZFS file device numbers.
  * Updated lsof test library for FreeBSD.
  * Updated socket optons information collection from the socket
    structure
  * Added patch to dlsof.h that avoids a _KERNEL conflict with
    bzero.
  * Corrected test library to handle 64 bit FreeBSD device numbers.
  * Added #defines for FreeBSD 12, src r324225
  * Incorporated Linux pseudoterminal endpoint processing (+|-E)
  * Corrected Linux command extraction for commands that include
    parentheses -- e.g., "(sd-pam)".
- remove lsof_4.89-nfs_hanging.patch that was applied upstream</changelog>
  <changelog author="kstreitova@suse.com" date="1522152000">- Update to version 4.91
  * This revision applies two fixes that correct the Linux PTY
  endpoint processing bug [bsc#1082900]</changelog>
</package>
<package pkgid="6416044650dffaf8955b77b9cc9eb35caa49a4b5c3b2a9b1b8f67afaaea0278d" name="lsscsi" arch="x86_64">
  <version epoch="0" ver="0.28" rel="1.24"/>
  <changelog author="hare@suse.de" date="1209038400">- Split off from original scsi package.</changelog>
  <changelog author="hare@suse.de" date="1211544000">- using 'Provides' to clean update dependency.</changelog>
  <changelog author="garloff@suse.de" date="1218542400">- Update to lsscsi-0.21:
  SysFS scanning changes imposed by kernel 2.6.25/26.</changelog>
  <changelog author="hare@suse.de" date="1225454400">- Update sysfs patch to match latest sysfs changes (bnc#434823)</changelog>
  <changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Update to 0.28
  * fix handling of scsi_level 0 (no compliance)
  * add SRP transport identifier
  * add --unit option for LU identifier (&gt;= lk 3.15)
  * add (S)ATA transport identifier (&gt;= lk 3.15)
  * make USB transport ids more consistent
  * fix FC transport id missing comma
  * add pdt strings for security manager and zbc
  * upgrade automake to version 1.14.1
- Do not install empty NEWS</changelog>
</package>
<package pkgid="7a31b7b1cb8b62a56d44d021b5a0d555bc3485e4074b504adcd739319dc3f237" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="8.39.1"/>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
</package>
<package pkgid="2902a7b1ee5e0b808789d2cb6c74ab8dc1bbaf7d917b4687f0bb6b7d0cc5e30c" name="lzop" arch="x86_64">
  <version epoch="0" ver="1.04" rel="3.2.1"/>
  <changelog author="guru@unixtech.be" date="1180612800">- initial submission to openSUSE Build Service
- patch to compile against lzo 2</changelog>
  <changelog author="guru@unixtech.be" date="1181131200">- update to 1.02rc1</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325592000">- Build lzop version 1.03</changelog>
  <changelog author="mpluskal@suse.com" date="1426248000">- Cleanup spec file with spec-cleaner
- Use url for source
- Cleanup dependencies
- Remove _DATE_ and _TIME_ usage</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add lzop-1.03-gcc6.patch to fix undefined behavior in its ACC test
  uncovered by GCC 6.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1459512000">- new lzop-1.03-gcc5_ppc64.patch:
  use static inlines as the external inline definition has
  changed with gcc5</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 1.0.4:
  * Added CMake build support
  * Assorted minor updates
- clean with spec-cleaner
- remove patches
  * lzop-1.03-gcc5_ppc64.patch
  * lzop-1.03-gcc6.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1510401601">- Use cmake for building
- Run tests during build</changelog>
  <changelog author="jengelh@inai.de" date="1510574400">- Remove bias from descriptions.</changelog>
</package>
<package pkgid="8d8848b38331568b5dd70f804087829917a618a5ce52d00e34bc196b866fafc1" name="m4" arch="x86_64">
  <version epoch="0" ver="1.4.18" rel="4.3.1"/>
  <changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake dependency</changelog>
  <changelog author="aj@suse.de" date="1342526400">- Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1384344000">- Update to version 1.4.17:
  * Fix compilation with newer glibc headers.
  * Fix a failure with diverting large amounts of text on mingw
    (does not affect platforms that can rename an open file).
  * A number of portability improvements inherited from gnulib.
- remove m4-stdio.in.patch, merged by upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1425297600">- Add gpg signature
- Add prerequires for info pages</changelog>
  <changelog author="mpluskal@suse.com" date="1443873600">- Update info handling from postun to preun</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 1.4.18:
  * Diagnose --word-regexp as unsupported if it was not configured.
  * Preliminary support for OS/2.
  * A number of portability improvements inherited from gnulib.
- Some packaging changes:
  * Use https url's
  * Get keyring from savannah
  * Use xs compressed files
  * Make building more verbose</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Fix de-registration of the info files.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Explicitly remove %{_infodir}/dir before creating package to
  allow builds on RHEL and derived Linux distributions
- Enable configure option --disable-dependency-tracking to
  allow build on Mageia
- Add xz as BuildRequires to unpack source on SLE 11</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: adjust gnulib for libio.h removal (bsc#1181571)
- Use %license for COPYING</changelog>
</package>
<package pkgid="be625497dc92188cb3dc8eda7f72a6b5fc932a9404a86553cfcaba9858a7d2dd" name="make" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="7.3.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1413374400">- make 4.1:
  * New variables: $(MAKE_TERMOUT) and $(MAKE_TERMERR) are set to
    non-empty values if stdout or stderr, respectively, are
    believed to be writing to a terminal.  These variables are
    exported by default.
  * Allow a no-text-argument form of the $(file ...) function.
  * Change the fatal error for mixed explicit and implicit rules
- refresh for contect changes:
  * make-library-search-path.diff
  * make-testcases_timeout.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1416225600">- Cleanup a bit with spec-cleaner
- Split lang stuff into subpackage and add recommends
- Add patch to work with non-mounted pts:
  * make-4.1-fix_null_returns_from_ttyname.patch</changelog>
  <changelog author="schwab@suse.de" date="1442404800">- undefine-variables.patch: Force recomputing .VARIABLES when a variable
  was made undefined (bsc#934131)</changelog>
  <changelog author="schwab@suse.de" date="1464004800">- Update to make 4.2
  * New variable: $(.SHELLSTATUS) is set to the exit status of the last != or
    $(shell ...) function invoked in this instance of make.
  * The $(file ...) function can now read from a file with $(file &lt;FILE).
  * The makefile line numbers shown by GNU make now point directly to the
    specific line in the recipe where the failure or warning occurred.
  * The interface to GNU make's "jobserver" is stable as documented in the
    manual, for tools which may want to access it.
  * The amount of parallelism can be determined by querying MAKEFLAGS
- undefine-variables.patch: Removed
- make-4.1-fix_null_returns_from_ttyname.patch: Removed
- 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch: Added
- 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch: Added
- Move %install_info_delete to %preun</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to version 4.2.1:
  * bug-fix release
- Drop upstream patches:
  * 0001-SV-47995-Ensure-forced-double-colon-rules-work-with-.patch
  * 0002-main.c-main-SV-48009-Reset-stack-limit-for-make-re-e.patch
- Small spec file cleanup
  * man and info pages are implicitly marked as documentation</changelog>
  <changelog author="schwab@suse.de" date="1505217600">- Print out testsuite results after failure</changelog>
  <changelog author="bwiedemann@suse.com" date="1508328000">- Add make-sorted-glob.patch to make many other packages like dpdk
  build reproducibly without patching them individually (boo#1041090)</changelog>
  <changelog author="schwab@suse.de" date="1509969600">- glob-lstat.patch: Do not assume glibc glob internals</changelog>
  <changelog author="schwab@suse.de" date="1516708800">- test-driver.patch: let perl find test_driver.pl
- glob-interface.patch: Support GLIBC glob interface version 2</changelog>
  <changelog author="schwab@suse.de" date="1531742400">- pselect-non-blocking.patch: Use a non-blocking read with pselect to avoid
  hangs (bsc#1100504)</changelog>
</package>
<package pkgid="fd892c6783768dfe2e9515f8e91d8910e2b7c171ffb61a988710ee779b58194d" name="makedumpfile" arch="x86_64">
  <version epoch="0" ver="1.6.7" rel="9.1"/>
  <changelog author="ptesarik@suse.com" date="1567684800">- Update to 1.6.6
  * Support for AMD Secure Memory Encryption
  * Exclude pages that are logically offline
  * Support kernels up to 5.1.9
- Drop makedumpfile-coptflags.diff.</changelog>
  <changelog author="ptesarik@suse.com" date="1567771200">- makedumpfile-Increase-SECTION_MAP_LAST_BIT-to-4.patch: Increase
  SECTION_MAP_LAST_BIT to 4 (bsc#1144708).</changelog>
  <changelog author="dimstar@opensuse.org" date="1580126400">- Drop libebl-devel BuildRequires: ebl is being absorbed by libdw.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580126401">- Update to version 1.6.7:
  + Makefile: remove -lebl from LIBS when no libebl.a.
  + Fix compilation warnings on 32-bit system.
  + Support newer kernels up to v5.4.
- Drop makedumpfile-Increase-SECTION_MAP_LAST_BIT-to-4.patch: fixed
  upstream.</changelog>
  <changelog author="ptesarik@suse.com" date="1580299200">- makedumpfile-PN_XNUM.patch: Define PN_XNUM if missing.</changelog>
  <changelog author="msuchanek@suse.com" date="1583323200">- makedumpfile-arm64-VA-range-SUSE.patch: Fix error processing core files on
  arm64 (bsc#1142715).</changelog>
  <changelog author="msuchanek@suse.de" date="1585742400">- Refresh patch with upstream version
  - makedumpfile-arm64-VA-range-SUSE.patch
  + makedumpfile-arm64-Align-PMD_SECTION_MASK-with-PHYS_MASK.patch
- makedumpfile-Fix-cd_header-offset-overflow-with-large-pfn.patch: Fix integer
  overflow with large memory configuration (bsc#1168234).</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add -fcommon in order to fix boo#1160282.</changelog>
  <changelog author="ptesarik@suse.com" date="1591272000">- makedumpfile-sadump-Fix-failure-of-reading.patch: sadump: Fix
  failure of reading __per_cpu_load memory (bsc#1168798).</changelog>
  <changelog author="mbrugger@suse.com" date="1618574400">- Fix guessing of VA_BITS and if present use TCR_EL1_T1SZ to determine
  vabits_actual (since kernel v5.9). (bsc#1183977)
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch
  * makedumpfile-1-3-Use-vmcoreinfo-note-in-proc-kcore-for-mem-.patch
  * makedumpfile-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  * makedumpfile-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch</changelog>
</package>
<package pkgid="7cced36d6e68a65b78dbe697d4e173b40539b12d090303d5b915a3e3825ae82d" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.24.9.1"/>
  <changelog author="colyli@suse.com" date="1592827200">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
</package>
<package pkgid="9cadb9c997cffb43b5e48380c48e679d784169039f885407a91275e45ee7c8c1" name="mdevctl" arch="noarch">
  <version epoch="0" ver="0.78" rel="1.24"/>
  <changelog author="jfehlig@suse.com" date="1593604800">- Initial packaging of mdevctl utility</changelog>
  <changelog author="jfehlig@suse.com" date="1607428800">- Update to version 0.78:
  * Automatic version commit for tag 0.78
  * use standard bash path
  * avoid other tags spilling into the .spec changelog
  * mdevctl: fix cleanup on error when creating and removing mdev
  * version support
  * Fix attributes getting applied via start-parent-mdevs
  * mdevctl: fix cleanup on error when writing to attribute
  * Remove never used 'available' option
  * Fix attribute validation
  jsc#SLE-15861, bsc#1179770</changelog>
</package>
<package pkgid="681e3278e369221d1adc78bd84aa415e5f966f2bc0cc569a60c7a5ae70125590" name="microos-tools" arch="x86_64">
  <version epoch="0" ver="2.11" rel="150300.5.2"/>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
</package>
<package pkgid="359158c7545dfeabc0e4128bd6d368ebd85618879da9adffd5672350d8a7e8e3" name="mkisofs" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="4.6.1"/>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="adam.majer@suse.de" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="61536fcda4135e3275576c1d4cc56119b5ff09d32ea0a8ff404dfc3ce261d71c" name="mokutil" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="4.3.1"/>
  <changelog author="glin@suse.com" date="1397649600">- Add mokutil-fix-hash-file-read.patch to fix the error handling of
  reading a hash file</changelog>
  <changelog author="glin@suse.com" date="1415102400">- Update to 0.3.0
- Add mokutil-fix-overflow.patch to fix the buffer overflow
- Drop upstreamed patches
  + mokutil-upstream-fixes.patch
  + mokutil-mokx-support.patch
  + mokutil-check-corrupted-key-list.patch
  + mokutil-check-secure-boot-support.patch
  + mokutil-clean-request.patch
  + mokutil-fix-hash-file-read.patch
  + mokutil-fix-hash-list-size.patch
  + mokutil-more-details-for-skipped-keys.patch
  + mokutil-no-invalid-x509.patch
- Refresh mokutil-support-revoke-builtin-cert.patch</changelog>
  <changelog author="glin@suse.com" date="1435665600">- Add mokutil-fshort-wchar.patch to make sure the UEFI strings are
  UCS-2 encoding.</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Patches for efivar 0.24
  + Add mokutil-set-efi-variable-file-mode.patch to set the file
    mode explicitly.
  + Add mokutil-constify-efi-guid.patch to make all efi_guild_t
    variables const.
  + Refresh mokutil-support-revoke-builtin-cert.patch for the
    change of efi_set_variable()</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="glin@suse.com" date="1542974400">- Enable AArch64 build (bsc#1119769, fate#326541)</changelog>
  <changelog author="glin@suse.com" date="1553169600">- Add modhash to calculate the hash of kernel module (SLE-5661)
  + Also add openssl to Requires since the script needs it</changelog>
  <changelog author="glin@suse.com" date="1559044800">- Update to 0.4.0
  + Rename export_moks as export_db_keys
  + Add support for exporting other keys
  + add new --mok argument
  + set list-enrolled command as default for some arguments
  + Add more info to --sb-state: show when we're in SetupMode or
    with shim validation disabled
  + Correct help: --set-timeout is really --timeout
  + generate_hash() / generate_pw_hash(): don't use strlen() for
    strncpy bounds
  + Add the type casting to silence the warning
  + Add a way for mokutil to configure a timeout for MokManager's
    prompt
  + list_keys_in_var(): check errno correctly, not ret twice
  + Fix typo in error message when the system lacks Secure Boot
    support
  + Add bash completion file
  + mokutil: be explicit about file modes in all cases
  + Make all efi_guid_t const
  + Don't allow sha1 on the mokutil command line
  + Build with -fshort-wchar so toggle passwords work right
  + Fix the 32bit signedness comparison
  + Fix the potential buffer overflow
- Add mokutil-remove-shebang-from-bash-completion-file.patch to
  remove shebang from bash-completion/mokutil
- Drop upstreamed patches
  + mokutil-constify-efi-guid.patch
  + mokutil-fix-overflow.patch
  + mokutil-fshort-wchar.patch
  + mokutil-set-efi-variable-file-mode.patch
- Refresh mokutil-support-revoke-builtin-cert.patch
- Install bash-completion/mokutil</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1576238400">- Add build for ppc64/ppc64le</changelog>
  <changelog author="glin@suse.com" date="1600257600">- Add mokutil-bsc1173115-add-ca-and-keyring-checks.patch to add
  options for CA and kernel keyring checks (bsc#1173115)
  + Add new BuildRequires: keyutils-devel
  + Add mokutil-remove-libkeyutils-check.patch to disable the
    version check of libkeyutils
- Refresh mokutil-support-revoke-builtin-cert.patch</changelog>
</package>
<package pkgid="10e29dd43b8e16d23f25319bfe7f98260c7d7cb2d722d6d63baf9868cd0c84ef" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.32" rel="3.20.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
</package>
<package pkgid="08a9c164fbe0b778c2457c42fbde83920afb50e33c6d040ec42ff59598c2c5ab" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="5695d1331cff070e94733ab74b4ae2a7b2a8280486cddb0986eff2544f9d36ec" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="3c480e41fa00c2c948f5edecdb9af92684518bce4395a1ce4db99e79ca49e2d0" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.68.2" rel="3.64.2"/>
  <changelog author="wr@rosenauer.org" date="1615896000">- update to NSS 3.62
  * bmo#1688374 - Fix parallel build NSS-3.61 with make
  * bmo#1682044 - pkix_Build_GatherCerts() + pkix_CacheCert_Add()
    can corrupt "cachedCertTable"
  * bmo#1690583 - Fix CH padding extension size calculation
  * bmo#1690421 - Adjust 3.62 ABI report formatting for new libabigail
  * bmo#1690421 - Install packaged libabigail in docker-builds image
  * bmo#1689228 - Minor ECH -09 fixes for interop testing, fuzzing
  * bmo#1674819 - Fixup a51fae403328, enum type may be signed
  * bmo#1681585 - Add ECH support to selfserv
  * bmo#1681585 - Update ECH to Draft-09
  * bmo#1678398 - Add Export/Import functions for HPKE context
  * bmo#1678398 - Update HPKE to draft-07
- required for Firefox 87</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to NSS 3.63.1
  * no upstream release notes for 3.63.1 (yet)
  Fixed in 3.63
  * bmo#1697380 - Make a clang-format run on top of helpful contributions.
  * bmo#1683520 - ECCKiila P384, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
    scalar multiplication.
  * bmo#1683520 - ECCKiila P521, change syntax of nested structs
    initialization to prevent build isses with GCC 4.8.
  * bmo#1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
    scalar multiplication.
  * bmo#1696800 - HACL* update March 2021 - c95ab70fcb2bc21025d8845281bc4bc8987ca683.
  * bmo#1694214 - tstclnt can't enable middlebox compat mode.
  * bmo#1694392 - NSS does not work with PKCS #11 modules not supporting
    profiles.
  * bmo#1685880 - Minor fix to prevent unused variable on early return.
  * bmo#1685880 - Fix for the gcc compiler version 7 to support setenv
    with nss build.
  * bmo#1693217 - Increase nssckbi.h version number for March 2021 batch
    of root CA changes, CA list version 2.48.
  * bmo#1692094 - Set email distrust after to 21-03-01 for Camerfirma's
    'Chambers of Commerce' and 'Global Chambersign' roots.
  * bmo#1618407 - Symantec root certs - Set CKA_NSS_EMAIL_DISTRUST_AFTER.
  * bmo#1693173 - Add GlobalSign R45, E45, R46, and E46 root certs to NSS.
  * bmo#1683738 - Add AC RAIZ FNMT-RCM SERVIDORES SEGUROS root cert to NSS.
  * bmo#1686854 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs
    from NSS.
  * bmo#1687822 - Turn off Websites trust bit for the ?Staat der
    Nederlanden Root CA - G3? root cert in NSS.
  * bmo#1692094 - Turn off Websites Trust Bit for 'Chambers of Commerce
    Root - 2008' and 'Global Chambersign Root - 2008?.
  * bmo#1694291 - Tracing fixes for ECH.
- required for Firefox 88</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to NSS 3.64
  * bmo#1705286 - Properly detect mips64.
  * bmo#1687164 - Introduce NSS_DISABLE_CRYPTO_VSX and
    disable_crypto_vsx.
  * bmo#1698320 - replace __builtin_cpu_supports("vsx") with
    ppc_crypto_support() for clang.
  * bmo#1613235 - Add POWER ChaCha20 stream cipher vector
    acceleration.</changelog>
  <changelog author="wr@rosenauer.org" date="1625918400">- update to NSS 3.66
  * bmo#1710716 - Remove Expired Sonera Class2 CA from NSS.
  * bmo#1710716 - Remove Expired Root Certificates from NSS - QuoVadis Root Certification Authority.
  * bmo#1708307 - Remove Trustis FPS Root CA from NSS.
  * bmo#1707097 - Add Certum Trusted Root CA to NSS.
  * bmo#1707097 - Add Certum EC-384 CA to NSS.
  * bmo#1703942 - Add ANF Secure Server Root CA to NSS.
  * bmo#1697071 - Add GLOBALTRUST 2020 root cert to NSS.
  * bmo#1712184 - NSS tools manpages need to be updated to reflect that sqlite is the default database.
  * bmo#1712230 - Don't build ppc-gcm.s with clang integrated assembler.
  * bmo#1712211 - Strict prototype error when trying to compile nss code that includes blapi.h.
  * bmo#1710773 - NSS needs FIPS 180-3 FIPS indicators.
  * bmo#1709291 - Add VerifyCodeSigningCertificateChain.
  * Use GNU tar for the release helper script.
- update to NSS 3.65
  * bmo#1709654 - Update for NetBSD configuration.
  * bmo#1709750 - Disable HPKE test when fuzzing.
  * bmo#1566124 - Optimize AES-GCM for ppc64le.
  * bmo#1699021 - Add AES-256-GCM to HPKE.
  * bmo#1698419 - ECH -10 updates.
  * bmo#1692930 - Update HPKE to final version.
  * bmo#1707130 - NSS should use modern algorithms in PKCS#12 files by default.
  * bmo#1703936 - New coverity/cpp scanner errors.
  * bmo#1697303 - NSS needs to update it's csp clearing to FIPS 180-3 standards.
  * bmo#1702663 - Need to support RSA PSS with Hashing PKCS #11 Mechanisms.
  * bmo#1705119 - Deadlock when using GCM and non-thread safe tokens.
- refreshed patches
- Firefox 90.0 requires NSS 3.66</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627560000">- update to NSS 3.68
  * bmo#1713562 - Fix test leak.
  * bmo#1717452 - NSS 3.68 should depend on NSPR 4.32.
  * bmo#1693206 - Implement PKCS8 export of ECDSA keys.
  * bmo#1712883 - DTLS 1.3 draft-43.
  * bmo#1655493 - Support SHA2 HW acceleration using Intel SHA Extension.
  * bmo#1713562 - Validate ECH public names.
  * bmo#1717610 - Add function to get seconds from epoch from pkix::Time.
- update to NSS 3.67
  * bmo#1683710 - Add a means to disable ALPN.
  * bmo#1715720 - Fix nssckbi version number in NSS 3.67 (was supposed to be incremented in 3.66).
  * bmo#1714719 - Set NSS_USE_64 on riscv64 target when using GYP/Ninja.
  * bmo#1566124 - Fix counter increase in ppc-gcm-wrap.c.
  * bmo#1566124 - Fix AES_GCM mode on ppc64le for messages of length more than 255-byte.</changelog>
  <changelog author="hpj@suse.com" date="1629288000">- Update nss-fips-constructor-self-tests.patch to fix crashes
  reported by upstream. This was likely affecting WebRTC calls.</changelog>
  <changelog author="cgrobertson@suse.com" date="1630411200">- Removed nss-fips-kdf-self-tests.patch.  This was made
  obsolete by upstream changes. (bmo#1660304)
- Rebase nss-fips-stricter-dh.patch needed due to upstream changes.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638273600">- Add patch to fix CVE-2021-43527 (bsc#1193170):
  nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638446400">- Mozilla NSS 3.68.1
  MFSA 2021-51 (bsc#1193170)
  * CVE-2021-43527 (bmo#1737470)
    Memory corruption via DER-encoded DSA and RSA-PSS signatures
- Remove now obsolete patch nss-bsc1193170.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Mozilla NSS 3.68.2 (bsc#1193845)
  * mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses
    (bmo#966856)</changelog>
</package>
<package pkgid="b3a8dfe5d0d0823c050ba4779b7954b83557d3151f2be8b4afa999c60f828cd5" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.8.5+82+suse.746b76e" rel="2.7.1"/>
  <changelog author="mwilck@suse.com" date="1600344000">- Bugref for all minor fixes since SLE15-SP2 release (bsc#1176670)
- Added README.alua</changelog>
  <changelog author="mwilck@suse.com" date="1607083200">- Remove compatibility code for SLE &lt;= 12-SP2 from spec file</changelog>
  <changelog author="mwilck@suse.com" date="1608120000">- Update to version 0.8.5+12+suse.3b0e9ca
  * libmultipath: force map reload if udev incomplete
  (bsc#1178662, bsc#1172157, bsc#1175454, bsc#1176406)
- Fixes from upstream 0.8.5
  * multipath-tools: add MacroSAN arrays to hwtable
  * libmultipath: Allow discovery of USB devices
  (add configuration option "allow_usb_devices")</changelog>
  <changelog author="mwilck@suse.com" date="1612958400">- Update to version 0.8.5+22+suse.e1e3c48:
  * multipath-tools tests: fix stringop-overflow build errors with gcc 11
    (bsc#1181877)
  * README moved to README.md (has been converted to markdown upstream)</changelog>
  <changelog author="mwilck@suse.com" date="1615377600">- Update to version 0.8.5+23+suse.c11b054:
  * multipath -U: reduce log level of "adding new path" message
  (bsc#1181435, bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1615550400">- Update to version 0.8.5+26+suse.2cbedfd:
  Avoid "illegal request" errors on non-RDAC storage
  (bsc#1182072, bsc#1177371)</changelog>
  <changelog author="mwilck@suse.com" date="1616068800">- Update to version 0.8.5+29+suse.5dabcd2:
  * 11-dm-mpath.rules: run "multipath -U" with -v1 (bsc#1182871)
  * libmultipath: merge update_multipath_table() and update_multipath_status()
  (bsc#1183666)</changelog>
  <changelog author="mwilck@suse.com" date="1617278400">- Update to version 0.8.5+30+suse.633836e:
  * multipathd: give up "add missing path" after multiple failures
  (bsc#1183963)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.5+80+suse.73c50f5:
  * add eh_deadline option to avoid endless SCSI error handling
  * add wwid_recheck option to detect storage configuration changes
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)
  * lots of bug fixes, additions to built-in hardware table, and
    CI improvements, backported from upstream 0.8.6 (bsc#1186212)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
  <changelog author="mwilck@suse.com" date="1632225600">- Update to version 0.8.5+82+suse.746b76e:
  * libmultipath: avoid buffer size warning with systemd 240+
  (bsc#1189176)
- Add a versioned dependency of multipath-tools on libmpath0
  (bsc#1190622)</changelog>
</package>
<package pkgid="e4230081b3d85ebf099c7737cb711324fb7542d8c78251468450ea7a1930cdf8" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="5.9.1"/>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
</package>
<package pkgid="c5f494d8d2ecfb3e4f55a266e8ddc0b4087c7a64e28e6b9b9d196a33f5c0f132" name="net-tools" arch="x86_64">
  <version epoch="0" ver="2.0+git20170221.479bb4a" rel="3.11"/>
  <changelog author="schwab@suse.de" date="1476705600">- net-tools-1.60-fix-header-conflict.patch: use kernel headers to avoid
  conflict with user-space headers</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1478001600">- add COPYING
- net-tools-1.60-use-gai.patch:
  use getaddrinfo instead of gethostbyname</changelog>
  <changelog author="tchvatal@suse.com" date="1497700800">- Cleanup a bit with spec-cleaner and remove sle11 conditions
- Drop the patch net-tools-1.60-obsolete.diff
  * If restored it is in the VCS and it silences all the rpm warnings</changelog>
  <changelog author="tchvatal@suse.com" date="1497700801">- Remove all the manpage altering patches as they are from 2002 and
  older while it changed and touching different languages for
  rebasing is not bright idea, the same applies for translations
  as upstream updated the translations we will pretend their
  strings win
- Switch to git service repacking so we don't have to carry all
  the patches ourselves
- Update to version 2.0+git20170221.479bb4a:
  * slattach/plipconfig: add a config knob to control them
  * Fixed trailing whitespace issue with a and i flags (#7)
  * iptunnel: drop netinet/ip.h include
  * iptunnel: fix building w/older linux headers
  * build: respect standard $(LDLIBS) variable
  * netstat: improve ROSE support
  * AX.25: Rename all references to axattach to kissattach.
  * Update all instances of my email address.
  * Fix conversion of some ROSE addresses.
  * Fix incorrect ARP output
- Merge patch net-tools-1.60-miioff.diff in the main config patch
- Rename net-tools-1.60.dif to net-tools-configure.patch in order
  to reflect what it actually does
- Drop nstrcmp.c as VCS contains newer version
- Drop patches that were either merged upstream or fixed bit differently:
  * manpages.diff
  * net-tools-1.60-arp-unaligned-access.patch
  * net-tools-1.60-compoundstatement.diff
  * net-tools-1.60-cont-buff.patch
  * net-tools-1.60-cs_CZ.bnc715580.diff
  * net-tools-1.60-doc.dif
  * net-tools-1.60-errors.patch
  * net-tools-1.60-fclose.diff
  * net-tools-1.60-fix-header-conflict.patch
  * net-tools-1.60-hostname-ipv6.patch
  * net-tools-1.60-hostname-s.patch
  * net-tools-1.60-hostname-space.patch
  * net-tools-1.60-ifconfig-SIOCSIFNETMASK.diff
  * net-tools-1.60-ifconfig.8.diff
  * net-tools-1.60-ifindex.diff
  * net-tools-1.60-infiniband.diff
  * net-tools-1.60-ipv6-statistics.diff
  * net-tools-1.60-krn26.dif
  * net-tools-1.60-long_to_int.diff
  * net-tools-1.60-multilinestr.diff
  * net-tools-1.60-nameif.diff
  * net-tools-1.60-netstat-ci.diff
  * net-tools-1.60-netstat-output.patch
  * net-tools-1.60-netstat-p.patch
  * net-tools-1.60-netstat.8.diff
  * net-tools-1.60-netstat_retval.diff
  * net-tools-1.60-numericstuff.diff
  * net-tools-1.60-plipconfig-ecode.patch
  * net-tools-1.60-plipconfig-manpage.patch
  * net-tools-1.60-plipconfig-usage.patch
  * net-tools-1.60-printval-conversion.patch
  * net-tools-1.60-sctp-quiet
  * net-tools-1.60-sctp.patch
  * net-tools-1.60-snmp-counter-overflow.patch
  * net-tools-1.60-sockios-SIOCGMIIPHY.diff
  * net-tools-1.60-strictaliasing.diff
  * net-tools-1.60-tcp-recvq-listen.patch
  * netstat-trunc.dif
  * net-tools-1.60-if_tr.diff
  * net-tools-1.60-interface_mtu.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1497700802">- Move binaries to sbindir and bindir respectively
- Switch from generating filelists to actually state them within
  the spec-file, now it is quite readable
- Move ifconfig and route to %{_bindir} as upstream does
  (and debian/rh/... do too)</changelog>
  <changelog author="tchvatal@suse.com" date="1497700803">- Disable removed binaries for build rather than on install
  * Refresh patch net-tools-configure.patch
- Make sure we respect optflags
- Add patch 0001-Add-ether-wake-binary.patch replacing standalone
  ether-wake code in the archive
- Add patch 0002-Do-not-warn-about-interface-socket-not-binded.patch
  replacing net-tools-1.60-interface_socket.diff
- Add patch 0003-Add-support-for-EiB-in-interface.c.patch enabling
  EiB support in interfaces
- Add patch 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch
  relpacing net-tools-1.60-netrom-fopen.diff
- Add patch 0005-Add-support-for-interface-rename-in-nameif.patch
  replacing nameif-rename.patch
- Add patch 0006-Allow-interface-stacking.patch
  replacing net-tools-1.60-interface_stack.patch
- Add patch 0007-Introduce-T-notrim-option-in-netstat.patch
  replacing net-tools-1.60-dont-trim-foreign-addr6.diff
  and also net-tools-1.60-notrim.diff
- Drop net-tools-1.60-use-gai.patch as it should be upstreamed first
  and it does not apply clearly at all now</changelog>
  <changelog author="tchvatal@suse.com" date="1497787200">- Provide compat symlink to /bin and /sbin to be on safe side
  if someone hardcoded them in scripts (most distros switched
  7 years ago)</changelog>
  <changelog author="tchvatal@suse.com" date="1497787201">- Drop netstat xinetd service as we are phasing xinetd out
  There is probably no need to replace it here as netstat was
  deprecated and now users should favor 'ss' command from
  iproute2</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Update descriptions to better reflect the contents of both packages
  and mention the deprecation of the tools (bsc#1067937)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="76281d37a56e17a864615df2bf88f255439f7b960a16390c0b31ce6d287e63d2" name="netcat-openbsd" arch="x86_64">
  <version epoch="0" ver="1.178" rel="1.24"/>
  <changelog author="crrodriguez@suse.de" date="1215259200">-  netcat-openbsd conflicts with netcat but it should not [BNC#406581]</changelog>
  <changelog author="crrodriguez@suse.de" date="1235131200">- sync most recent bugfixes from debian/Ubuntu</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1274184000">- sync recent bugfixes from Ubuntu</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1275048000">- Obsolete nc6</changelog>
  <changelog author="lmuelle@suse.de" date="1277467200">- Use update-alternatives to set netcat symbolic links for compatibility.
- Provides and obsoltes netcat.</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1310817600">- Fixed typos in description of netcat-openbsd.spec</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1323518400">- Update xbuntu patches.
- Ensure we have large file support in 32 bit builds
- Fix rpmlint warnings</changelog>
  <changelog author="pth@suse.de" date="1378123200">- Split up the huge ubuntu patch into a debian specific patch,
  a patch that creates the examples, a patch with the openbasd-compat
  stuff and single files for each of the patches in debian/patches.
  This hugely eases maintainabilty:
  connect-timeout.patch, dccp.patch, gcc-warnings.patch,
  getservbyname.patch, glib-strlcpy.patch, help-version-exit.patch,
  nc-1.84-udp_stop.patch, netcat-info.patch, netcat-openbsd-debian.patch,
  netcat-openbsd-examples.patch, netcat-openbsd-openbsd-compat.patch,
  no-strtonum.patch, pollhup.patch, quit-timer.patch, reuseaddr.patch,
  send-crlf.patch, silence-z.patch, socks-b64-prototype.patch,
  udp-scan-timeout.patch, verbose-message-to-stderr.patch,
  verbose-numeric-port.patch.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389960000">- drop dependency on glib, strlcpy can be implemented with
  snprintf with glibc/linux
- drop "quilt" from buildrequires, no longer used.
- Use fvisibiliy=hidden to build, this is a program not
  a library and no symbols should be exported.
- modified patches:
  * glib-strlcpy.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop all patches that were never upstreamed:
  * connect-timeout.patch
  * dccp.patch
  * gcc-warnings.patch
  * getservbyname.patch
  * glib-strlcpy.patch
  * help-version-exit.patch
  * nc-1.84-udp_stop.patch
  * netcat-info.patch
  * netcat-openbsd-debian.patch
  * netcat-openbsd-examples.patch
  * netcat-openbsd-openbsd-compat.patch
  * no-strtonum.patch
  * pollhup.patch
  * quit-timer.patch
  * reuseaddr.patch
  * send-crlf.patch
  * silence-z.patch
  * socks-b64-prototype.patch
  * udp-scan-timeout.patch
  * verbose-message-to-stderr.patch
  * verbose-numeric-port.patch
- Switch to debian package to not waste resources on doing exactly
  the same.
- Switches URL for debian package
- Apply patches already prepared for debian package
  * port-to-linux-with-libsd.patch
  * compile-without-TLS-support.patch
  * connect-timeout.patch
  * get-sev-by-name.patch
  * send-crlf.patch
  * quit-timer.patch
  * udp-scan-timeout.patch
  * verbose-numeric-port.patch
  * dccp-support.patch
  * serialized-handling-multiple-clients.patch
  * set-TCP-MD5SIG-correctly-for-client-connections.patch
  * misc-failures-and-features.patch
- Do not use hand provided CMakeLists.txt but rely on upstream makefile</changelog>
</package>
<package pkgid="4bde1360f3e5cf4d52093fd5e1c4a7540c19ca207ec422ff421c204d684c2bc0" name="netcfg" arch="noarch">
  <version epoch="0" ver="11.6" rel="3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
</package>
<package pkgid="08f759cb521276ebe25ea5be8047528d29f148533a3cbd28120880eaacdbf937" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.21.1"/>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
</package>
<package pkgid="6e21722d7cba4516799ac61f1337a4ca1d6438edbdca69c3e8f3f7cf3865a647" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.21.1"/>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
</package>
<package pkgid="7fcb204c8ae8ade35d500f6cc207baaeec5ea8213916afbaf3802eeeb854f181" name="nfsidmap" arch="x86_64">
  <version epoch="0" ver="0.26" rel="3.3.1"/>
  <changelog author="coolo@suse.com" date="1322222400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="aj@suse.de" date="1322222401">- Upstream tarball is .gz, change source.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325419200">- On Dec 18 2010, export symbols patch was reverted, which is fine
  however we MUST still hide strlcpy() symbol as it will clash
  with other programs.</changelog>
  <changelog author="meissner@suse.com" date="1375099200">- upgraded to 0.25 (FATE#312769)
  * nss_getpwnam: ignore case when comparing domain names
  * rpc.idmapd fails to load plugings
  * Cleaned up some warnings
  * Ignoring more files.
  * Improve debugging during lib initialization.
  * Added new --with-pluginpath configuration flag
- specify correct plugin searchpath to find plugins on lib64 systems
  bnc#800805
- fix-prototype.patch: updated to 0.25 state, dropped 2 upstream hunks
- libnfsidmap-export-symbols.patch: unfuzzed</changelog>
  <changelog author="meissner@suse.com" date="1375099201">- buildrequire pkg-config</changelog>
  <changelog author="p.drouand@gmail.com" date="1382443200">- Remove %fillup_prereq %insserv_prereq PreReq; the package doesn't
  contain any sysvinit script and sysconfig file
- Remove redundant %clean section</changelog>
  <changelog author="meissner@suse.com" date="1392379200">- actually enable the LDAP plugin. bnc#859625</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Use implicit %attrs; remove ancient specfile tags/sections</changelog>
  <changelog author="p.drouand@gmail.com" date="1425556800">- Update to version 0.26
  * No changelog available
- Point download Url to new home
- Remove depreciated AUTHORS section</changelog>
  <changelog author="nfbrown@suse.com" date="1533643200">- 0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
  0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
  Improve support for SAMBA+AD
  (bsc#1098217)</changelog>
</package>
<package pkgid="cfe9fd20395ff484ae002357e0291f35fbfd4a39cc125477f4931d5c209561e5" name="nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="1.7"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
</package>
<package pkgid="e21500baa8ac8f5833d253370e82ef9ef7f663b7152f7c30921282c34d71b0de" name="nss-mdns" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="1.30"/>
  <changelog author="olh@suse.de" date="1211976000">- change the recommends for XXbit packages to a supplements
  add a Conflicts: != version to the XXbit packages, to give a hint
  during manual package upgrades (bnc#336678)</changelog>
  <changelog author="ro@suse.de" date="1223899200">- simplify and correct baselibs.conf</changelog>
  <changelog author="vuntz@novell.com" date="1241179200">- Remove AutoReqProv: it's default now.
- Also fix a typo in the description.</changelog>
  <changelog author="jengelh@medozas.de" date="1260878400">- Add baselibs.conf as a source</changelog>
  <changelog author="vuntz@opensuse.org" date="1342008000">- Add nss-mdns-config script as a source, and install it in
  /usr/sbin: this script can be used to enable/disable mdns in
  /etc/nsswitch.conf (-4/-6 can be used to restrict
  enabling/disabling to IPv4/IPv6).
- Change %post/%preun scriptlets to use new nss-mdns-config script
  instead of custom perl-fu.
- Do not restrict mdns support in /etc/nsswitch.conf to IPv4: just
  pass --enable to nss-mdns-config in %post. Fix bnc#710231.
- Only call nss-mdns-config in %post on first install, to avoid
  overwriting changes done by users. Fix nss-mdns side of
  bnc#729796.
- Do not call sed to change /etc/nsswitch.conf to remove services
  not provided by nss-mdns anymore: when we need this, we'll be
  able to integrate this in nss-mdns-config.</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="ledest@gmail.com" date="1413633600">- Fix bashisms in nss-mdns-config.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1553774400">- Update to version 0.14.1:
  + No code changes.
  + Fix unit tests to properly work on s390x.
- Changes from version 0.14.0:
  + Fix -Wformat-truncation problem during reading of the allow
    file.
- Changes from version 0.13.2:
  + No code changes.
  + Change how ./configure --enable/disable-tests works:
  - --enable-tests: tests are enabled and will fail if
    dependencies are not found.
  - --disable-tests: tests are not enabled and will not be built
    even if dependencies are found.
  - no flag given: tests are conditionally enabled if
    dependencies are found.
- Changes from version 0.13.1:
  + Very minor code changes (should result in no binary changes).
  + Reformat source to 80 columns.
  + Improve configure options to allow disabling tests even if the
    testing libraries are present.
  + Automake is now non-recursive.
  + Hardcoded paths are now exposed as configure variables.
- Changes from version 0.13:
  + Fix an old memory leak in reverse lookup.
  + Fix the broken workaround for nscd segfaults (not all clients
    would see all results).
  + Simplify buffer management.
  + More unit tests, more cleanups, and fewer gotos.
- Changes from version 0.12:
  + Fix segfault when using nscd.
  + Remove untested, unmaintained BSD support (please help out if
    you would like BSD support to return!).
- Changes from version 0.11:
  + Moved to new GitHub location, docs migrated to markdown.
  + The long-deprecated LEGACY mode is removed.
  + The long-deprecated HONOUR_SEARCH_DOMAINS option is removed.
  + Unit tests are now included, with make check.
  + nss-mdns now implements standard heuristics for detecting
    .local unicast resolution and will automatically disable
    resolution when a local server responds to .local requests.
  + _nss_mdns_gethostbyname3_r and _nss_mdns_gethostbyname4_r are
    now implemented.
  + Full dual-stack IPv4/IPv6 support is implemented.
- Run spec-cleaner, modernize spec.
- Update URL and Source to new upstream home.
- Drop unaligned.diff: Fixed upstream.
- Add pkgconfig(check) BuildRequires and make_check macro, run
  buildtime tests.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Move libraries into the standard dir (/usr/lib*).
  nss_winbind already lives there, which I take as an indicator
  this move will work.</changelog>
</package>
<package pkgid="5b9de1fed4a1096498ae388f674cab7b65464a4c05dac6dd3df51dc289445f72" name="numactl" arch="x86_64">
  <version epoch="0" ver="2.0.14.20.g4ee5e0c" rel="10.1"/>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14 (SLE-17217):
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update to version 2.0.14.17.g498385e:
  * numactl.c: fix use after free
  * sysfs.c: prevent mem leak in sysfs_node_read()
  * sysfs.c: don't leak fd if fail in sysfs_read()
  * shm.c: fix memleak in verify_shm()
  * shm.c: fix memleak in dump_shm()
  * fix description for numa_node_size64 in man as well
  * fix numa_node_size definition in manpage numa.3
  * link with -latomic if needed
  * libnuma: make numa_police_memory() free of race
  * numademo: Use first two nodes instead of node 0 and 1
- Enhance _service magic
- Enable automake</changelog>
  <changelog author="trenn@suse.de" date="1630497600">- Update to version 2.0.14.20.g4ee5e0c:
  * Fix system call numbers on s390x
  * numactl.c: fixed debug verify for --preferred option
  * numactl.c: Fixed description for the usage of numactl</changelog>
</package>
<package pkgid="96527318b7caeb8cb695ad9d32668b5e411cea1e40fa82521cfb1ec64a8f0318" name="numad" arch="x86_64">
  <version epoch="0" ver="0.5.20130522" rel="3.2.1"/>
  <changelog author="mgorman@suse.com" date="1369310400">- Initial package</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't call insserv if we use systemd</changelog>
</package>
<package pkgid="c73d704504757cb8a2008b8995aa75d6cb9462aa27066347602c56e8b6dd4c75" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.13" rel="150300.3.13.1"/>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624276800">- Do not print error message when opening controller (bsc#1186719)
  * add 0004-nvme-topology-no-error-message-when-openeing-of-cont.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1628683200">- Fix failures during 'nvme list' (bsc#1186719)
  * add 0005-nvme-ioctl-return-1-on-failure-from-nvme_get_nsid.patch
  * add 0006-nvme-topology-scan-all-controllers-in-scan_subsystem.patch
- Permit integer as KATO argument (bsc#1182591)
  * add 0007-fabrics-permit-kato-int-argument-for-discovery-contr.patch
- Skip connect if transport type doesn't match (bsc#1187287 bsc#1187860)
  * add 0008-fabrics-skip-connect-if-transport-type-doesn-t-match.patch
- Ignore non live controllers when scanning subsystems (bsc#1186719 bsc#1187287)
  * add 0009-nvme-topology-fix-controller-check-in-scan_subsystem.patch
- Remove UUID validation heuristic (bsc#1187890)
  * add 0010-gen-hostnqn-Remove-UUID-validation-heuristic.patch
  * update 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Do not segfault when controller is not available (bsc#1189046)
  * add 0011-nvme-print-fix-nvme-list-segfault-if-controller-is-u.patch
- Use correct default port for discovery (bsc#1189195 bsc#1187858)
  * add 0012-fabrics-add-default-port-number-for-NVMe-TCP-I-O-con.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1637236800">- Allow -1 as ctrl_loss_tmo value (bsc#1192348)
  * add 0013-nvme-cli-ctrl-loss-tmo-should-accept-1-as-value.patch
- Fix segfauls while discovering (bsc#1191935)
  * add 0014-Input-expects-device-name-without-dev.patch
  * add 0015-fabrics-fix-nvme-discover-segfault-if-sysfs-path-is-.patch
  * add 0016-fabrics-Only-free-initialized-valued-on-exit.patch
  * add 0017-nvme-print-add-discovery-async-event-config-field.patch
  * add 0018-fabrics-fix-nvme-connect-segfault-if-transport-type-.patch
- Context udpate
  * refresh 0004-nvme-topology-no-error-message-when-openeing-of-cont.patch
- Adding missing hunk (bsc#1182591)
  * update 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
- Use pkg-config for libuuid dependency setup
  * add 0103-build-use-pkg-config-for-libuuid-detection.patch</changelog>
  <changelog author="dwagner@suse.de" date="1643198400">- fabrics: fix 'nvme connect' segfault if transport type is omitted (bsc#1193540)
  * add 0018-fabrics-fix-nvme-connect-segfault-if-transport-type-.patch
  * add 0019-fabrics-update-discovery.conf-error-message.patch</changelog>
</package>
<package pkgid="a0c008953a707474a9097f9944e2a291ef67d5e044bc7a5fb1c0d43c0ffa5eb7" name="open-iscsi" arch="x86_64">
  <version epoch="0" ver="2.1.6" rel="150300.32.15.1"/>
  <changelog author="lduncan@suse.com" date="1620820800">- Merge latest upstream, which added fix (bsc#1185930):
  * Set default 'startup' to 'onboot' for FW nodes</changelog>
  <changelog author="lduncan@suse.com" date="1626868800">- Merge latest upstream, which includeds:
  * Support the "qede" CMA-card driver. (bsc#1188579)
  * iscsistart: fix null pointer deref before exit</changelog>
  <changelog author="lduncan@suse.com" date="1629460800">- Merged latest upstream, which includes:
  * iscsid: set PR_SET_IO_FLUSHER (bsc#1188869)</changelog>
  <changelog author="lduncan@suse.com" date="1631102400">- Updated to latest upstream 2.1.5 as 2.1.5-suse, which contains
  these changes not already present:
  * Handle IPv6 interfaces correctly. (bsc#1187958)
  * Handle qedi correctly in NPAR mode (bsc#1187958)
  * Update iscsiadm man page (bsc#1187958)
  * Update iface.example for ipv6
  * Change iscsi IP type from defines to enum.
  * Handle recv() returning 0 in iscsid_response()</changelog>
  <changelog author="lduncan@suse.com" date="1633003200">- Update to latest from upstream, fixing:
  * Moving the executables from /sbin to /usr/sbin (bsc#1191054)
  * Remove default dependencies from iscsi-init.service
  (bsc#1187190)</changelog>
  <changelog author="lduncan@suse.com" date="1633435200">- Fix possible systemd cycle by adding an "obsoletes" for
  the old libopeniscsiusr for older versions.</changelog>
  <changelog author="lduncan@suse.com" date="1635163200">- Fix the usr-merge changes (bsc#1192013). This includes catching
  all the places that /sbin was still used directly, as well as
  making the SPEC file build using /usr/sbin for openSUSE but
  still use /sbin for SLE, for now.</changelog>
  <changelog author="lduncan@suse.com" date="1636632000">- Merged latest upstream. Mostly cleanup, but includes a fix for
  iscsi-init.service when trying to write to the root volume too
  early (bsc#1192568), as well as an upstream fix for possible
  deadlock when dealing with sysfs.</changelog>
  <changelog author="lduncan@suse.com" date="1644840000">- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.</changelog>
  <changelog author="lduncan@suse.com" date="1646481600">- Update to latest upstream, including test cleanup, minor
  bug fixes (cosmetic), and fixing iscsi-init (bsc#1195656).</changelog>
</package>
<package pkgid="2058789e1a5bcf1b8d817fd9141cf4adf2f624123d998743bb42f4cbaf3d9ede" name="open-lldp" arch="x86_64">
  <version epoch="0" ver="1.1+44.0f781b4162d3" rel="3.3.1"/>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
</package>
<package pkgid="b0356abc37daee6a8cf08dd6ad8fac09dc70af7caf0b3dc346a50cc3f91eed89" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="11.3.5" rel="13.1"/>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
</package>
<package pkgid="5bd472d44f73db58f3511f564a750f00e3085baf112b82ee9df965cc92f3b03e" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.19.0" rel="3.7.1"/>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="mcalabkova@suse.com" date="1539086400">- fixed multiple security problems (out of bound writes/reads):
    bsc#1104812
    CVE-2018-16391 (bsc#1106998)
    CVE-2018-16392 (bsc#1106999)
    CVE-2018-16393 (bsc#1108318)
    CVE-2018-16418 (bsc#1107039)
    CVE-2018-16419 (bsc#1107107)
    CVE-2018-16420 (bsc#1107097)
    CVE-2018-16421 (bsc#1107049)
    CVE-2018-16422 (bsc#1107038)
    CVE-2018-16423 (bsc#1107037)
    CVE-2018-16424 (bsc#1107036)
    CVE-2018-16425 (bsc#1107035)
    CVE-2018-16426 (bsc#1107034)
    CVE-2018-16427 (bsc#1107033)
- added patches:
    opensc-fixed-out-of-bounds-reads.patch
    opensc-fixed-out-of-bounds-writes.patch
    opensc-iasecc-fixed-unbound-recursion.patch
    opensc-added-bounds-checking.patch (fixes security issue caused
    by opensc-fixed-out-of-bounds-writes.patch)
    (see upstream commits for more informations)</changelog>
  <changelog author="kbabioch@suse.com" date="1551182400">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Drop patches:
    opensc-fixed-out-of-bounds-reads.patch
    opensc-fixed-out-of-bounds-writes.patch
    opensc-iasecc-fixed-unbound-recursion.patch
    opensc-added-bounds-checking.patch
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1615809600">- Fix buffer overflow in sc_oberthur_read_file
  * bsc#1177364
  * CVE-2020-26570
  * Added opensc-0_19_0-CVE-2020-26570.patch</changelog>
  <changelog author="jsikes@suse.com" date="1616328000">- bsc#1177380 - VUL-0: CVE-2020-26571
  * gemsafe GPK smart card software driver stack-based buffer overflow
  * opensc-0_19_0-CVE-2020-26571.patch
- bsc#1158307 - VUL-1: CVE-2019-19480
  * improper free operation in sc_pkcs15_decode_prkdf_entry
  * opensc-0_19_0-CVE-2019-19480.patch
- bsc#1149747 ? VUL-1: CVE-2019-15946
  * out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry
  * opensc-0_19_0-CVE-2019-15946.patch
- bsc#1149746 ? VUL-1: CVE-2019-15945
  * out-of-bounds access of an ASN.1 Bitstring in decode_bit_string
  * opensc-0_19_0-CVE-2019-15945.patch
- bsc#1158256 ? VUL-1: CVE-2019-19479
  * incorrect read operation during parsing of a SETCOS file attribute
  * opensc-0_19_0-CVE-2019-19479.patch
- bsc#1170809 ? VUL-1: CVE-2019-20792
  * double free in coolkey_free_private_data
  * opensc-0_19_0-CVE-2019-20792.patch
- bsc#1177378 - VUL-0: CVE-2020-26572
  * Prevent out of bounds write
  * opensc-0_19_0-CVE-2020-26572.patch</changelog>
</package>
<package pkgid="66d5e2f54e0a2e3b33dad33773dc44d876e7cc26e4c5ebee9c91b4045eae2639" name="openslp" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="6.15.1"/>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="4bbe3ba53cc363bbc0470b33b6285efa2e121abb98feea80aaccec87a5b74277" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="3.9.1"/>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
</package>
<package pkgid="1bb114499f25060651ee6e2e2aa5e0b189b7e3af5a8ac4671a7f38090fac3ff9" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="3.9.1"/>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
</package>
<package pkgid="711e5c354aff50b8948514656461398e096ef66485b8f2b85fdce189bfab3cf2" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="3.9.1"/>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
</package>
<package pkgid="209dbed64ae842f2b364f7b3b457d584ee98101a070f1d0a941c43ee633503b6" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="3.9.1"/>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
</package>
<package pkgid="cad2b999334b3c76af390154044e421560df188cb8a6cf8eeffadd6bafc64a92" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="3.9.1"/>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
</package>
<package pkgid="50f4d95895e9717e0126c1ade2e4036bd8fc6e238b1e71cc4b5980e7c8b91387" name="openssl" arch="noarch">
  <version epoch="0" ver="1.1.1d" rel="1.46"/>
  <changelog author="tchvatal@suse.com" date="1498219200">- Revert back to 1.0.2l for now so we get new fixes of 1.0 openssl
  to tumbleweed</changelog>
  <changelog author="vcizek@suse.com" date="1499774400">- Obsolete openssl-debuginfo
  * the package doesn't exist any more, has been replaced by
    openssl-{so_version}-debuginfo (bsc#1040172)</changelog>
  <changelog author="tchvatal@suse.com" date="1501502400">- Switch to 1.1.0f release as default again</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Revert version back to 1.0.2m to get security fixes quickly to
  Tumbleweed
  * OpenSSL Security Advisory [02 Nov 2017] (bsc#1066242,bsc#1056058)</changelog>
  <changelog author="vcizek@suse.com" date="1509969600">- Update to 1.1.0g release</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- change the sonum to 1.1, as all the minor versions keep ABI
  compatibility (bsc#1081335)
- update baselibs.conf</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h release</changelog>
  <changelog author="vcizek@suse.com" date="1534420800">- Update to 1.1.0i release</changelog>
  <changelog author="vcizek@suse.com" date="1567080000">- Upgrade to 1.1.1c release to get TLS 1.3 support
  (jsc#SLE-9135, bsc#1148799)</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Update to 1.1.1d release</changelog>
</package>
<package pkgid="1c9be61f1b7950a6aae92fc917de63716fa1b0525386f588d5964a4d5b03459a" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1d" rel="11.43.1"/>
  <changelog author="jsikes@suse.com" date="1617796800">- Don't list disapproved cipher algorithms while in FIPS mode
  * openssl-1.1.1-fips_list_ciphers.patch
  * bsc#1161276</changelog>
  <changelog author="jsikes@suse.com" date="1620734400">- Previously added patch interferes with FIPS validation.
  * Removed openssl-1.1.1-fips_list_ciphers.patch</changelog>
  <changelog author="jsikes@suse.com" date="1629288000">- A bug in the implementation of the SM2 decryption code means that the
  calculation of the buffer size required to hold the plaintext returned by the
  first call to EVP_PKEY_decrypt() can be smaller than the actual size required by
  the second call. This can lead to a buffer overflow when EVP_PKEY_decrypt() is
  called by the application a second time with a buffer that is too small.
  * CVE-2021-3711
  * bsc#1189520
  * Add:
    CVE-2021-3711-1-Correctly-calculate-the-length-of-SM2-plaintext-give.patch
    CVE-2021-3711-2-Extend-tests-for-SM2-decryption.patch
    CVE-2021-3711-3-Check-the-plaintext-buffer-is-large-enough-when-decr.patch
- The function X509_aux_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_aux_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640952000">- Add RSA_get0_pss_params() accessor that is used by nodejs16
  and provide openssl-has-RSA_get0_pss_params, fixes bsc#1192489.
  * Add patch rsa-pss.patch, provided by Adam Majer, amajer@suse.com</changelog>
  <changelog author="pmonreal@suse.com" date="1643889600">- Enable zlib compression support [bsc#1195149]
  * Add openssl-fix-BIO_f_zlib.patch to fix BIO_f_zlib: Properly
    handle BIO_CTRL_PENDING and BIO_CTRL_WPENDING calls.</changelog>
  <changelog author="pmonreal@suse.com" date="1643976000">- FIPS: Fix function and reason error codes [bsc#1182959]
  * Add openssl-1_1-FIPS-fix-error-reason-codes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1644580800">- Pull libopenssl-1_1 when updating openssl-1_1 with the same
  version. [bsc#1195792]</changelog>
  <changelog author="pmonreal@suse.com" date="1644926400">- Fix PAC pointer authentication in ARM [bsc#1195856]
  * PAC pointer authentication signs the return address against the
    value of the stack pointer, to prevent stack overrun exploits
    from corrupting the control flow. The Poly1305 armv8 code got
    this wrong, resulting in crashes on PAC capable hardware.
  * Add openssl-1_1-ARM-PAC.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch openssl-CVE-2022-0778-tests.patch</changelog>
</package>
<package pkgid="e6a2928b3d774c31856f678bc87b0f7ff453946400e0431bb52fd74547546b28" name="osinfo-db" arch="noarch">
  <version epoch="0" ver="20201218" rel="1.13"/>
  <changelog author="carnold@suse.com" date="1583236800">- Update database to version 20200214
  osinfo-db-20200214.tar.xz
- Drop patch included in new tarball
  add-sle12sp5-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1583409600">- bsc#1165855 - Add UEFI support to the database for SLES and
  openSUSE distros
  5bbe30db-opensuse-add-info-about-UEFI-support.patch
  SLE-add-info-about-UEFI-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1590148800">- bsc#1172008 - osinfo-db: Add support for openSUSE Leap 15.2
  add-opensuse-leap-15.2-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update database to version 20200529
- Drop 5bbe30db-opensuse-add-info-about-UEFI-support.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1593604800">- Add fix-tumbleweed-order.patch: ensure x86_64 is listed before
  i686, to have x86_64 selected by default in GNOME Boxes
- Update url with gitlab home for osinfo-db.</changelog>
  <changelog author="carnold@suse.com" date="1596801600">- Update database to version 20200804
- Drop patches included in new tarball
  add-opensuse-leap-15.2-support.patch
  add-sle15sp2-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1597406400">- Add support for openSUSE Leap 15.3 and SLE15-SP3
  add-leap15.3-support.patch
  add-sle15sp3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1599134400">- Update database to version 20200813
  osinfo-db-20200813.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1603713600">- Update database to version 20201015
  osinfo-db-20201015.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1610452800">- Update database to version 20201218
  osinfo-db-20201218.tar.xz</changelog>
</package>
<package pkgid="72f1b7f931b10a09a32f02adc42fe64793f6e613dd49f218bba7bd8b2dab7846" name="p11-kit" arch="x86_64">
  <version epoch="0" ver="0.23.2" rel="4.13.1"/>
  <changelog author="lnussel@suse.de" date="1409313600">- new version 0.20.3
  * Fix problems reinitializing managed modules after fork
  * Fix bad bookeeping when fail initializing one of the modules
  * Fix case where module would be unloaded while in use [#74919]
  * Remove assertions when module used before initialized [#74919]
  * Fix handling of mmap failure and mapping empty files [#74773]
  * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions
  * Require automake 1.12 or later
  * Build fixes for Windows [#76594 #74149]
- apply patches to avoid errors from certificates with invalid public key
  (fdo#82328, bnc#890908,
  trust-Dont-use-invalid-public-keys-for-looking-up-.patch,
  trust-Print-label-of-certificate-when-complaining-.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="lnussel@suse.de" date="1626782400">- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993,
  0001-trust-Support-CKA_NSS_-SERVER-EMAIL-_DISTRUST_AFTER.patch)
- add bcond to spec file to enable debug easily</changelog>
  <changelog author="meissner@suse.com" date="1638878400">- 0001-common-Use-reallocarray-instead-of-realloc-as-approp.patch
  0001-Check-for-arithmetic-overflows-before-allocating.patch
  0001-Follow-up-to-arithmetic-overflow-fix.patch:
  Fixed multiple integer overflows in rpc code (bsc#1180064
  CVE-2020-29361)</changelog>
</package>
<package pkgid="0cf23aff84c28881b58d808a6901a7a52591dcb051ae9d24c8ddfab3a7a39e72" name="p11-kit-tools" arch="x86_64">
  <version epoch="0" ver="0.23.2" rel="4.13.1"/>
  <changelog author="lnussel@suse.de" date="1409313600">- new version 0.20.3
  * Fix problems reinitializing managed modules after fork
  * Fix bad bookeeping when fail initializing one of the modules
  * Fix case where module would be unloaded while in use [#74919]
  * Remove assertions when module used before initialized [#74919]
  * Fix handling of mmap failure and mapping empty files [#74773]
  * Stable p11_kit_be_quiet() and p11_kit_be_loud() functions
  * Require automake 1.12 or later
  * Build fixes for Windows [#76594 #74149]
- apply patches to avoid errors from certificates with invalid public key
  (fdo#82328, bnc#890908,
  trust-Dont-use-invalid-public-keys-for-looking-up-.patch,
  trust-Print-label-of-certificate-when-complaining-.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1413201600">- remove patches:
  * trust-Print-label-of-certificate-when-complaining-.patch
  * trust-Dont-use-invalid-public-keys-for-looking-up-.patch
- new version 0.20.7 (stable)
  * New public pkcs11x.h header containing extensions [fdo#83495]
  * Export necessary defines to lookup attached extensions [fdo#83495]
  * Build fixes
- new version 0.20.6 (stable)
  * Make the p11-kit-proxy.so module respect critical = no [fdo#83651]
  * Build fix for FreeBSD [fdo#75674]
- new version 0.20.5 (stable)
  * Don't use invalid keys for looking up stapled extensions [fdo#82328]
  * Better error messages when invalid certificate extensions
  * Fix parsing of some odd OpenSSL TRUSTED CERTIFICATE files
  * Fix some leaks, and memory issues
  * Silence some clang scanner warnings
- new version 0.20.4 (stable)
  * Don't complain about C_Finalize after a fork
  * Fix typo</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 0.23.1 (stable)
  * Use new PKCS#11 URI draft fields for URIs [fdo#86474 fdo#87582]
  * Add pem-directory-hash extract format
  * Build fixes
- Remove 0001-trust-allow-to-also-add-openssl-style-hashes-to-pem-d.diff;
  fixed on upstream release
- Remove autoconf, automake and libtool require; unneeded dependencies
- Add gtk-doc require; needed to build html documentation
- Remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Update to 0.23.2
  * Fix forking issues with libffi
  * Fix various crashes in corner cases
  * Updated translations
  * Build fixes
- Make building more verbose
- Enable tests
- Small spec file cleanup with spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- 32-bit compatibility fixes:
  * Add PKCS11 module to p11-kit-32bit (bsc#996047#c39)
  * Add p11-kit-nss-trust-32bit NSS module
  * Fix potential bi-arch issue with private binaries
    (fdo#98817, p11-kit-biarch.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="lnussel@suse.de" date="1573819200">- support loading NSS attribute CKA_NSS_MOZILLA_CA_POLICY so Firefox
  detects built in certificates (boo#1154871,
  0001-Fix-a-typo-in-x-cetrificate-value-see-also-https-bug.patch,
  0001-Support-loading-new-NSS-attribute-CKA_NSS_MOZILLA_CA.patch)</changelog>
  <changelog author="lnussel@suse.de" date="1577102400">- Also build documentation (boo#1013125)</changelog>
  <changelog author="lnussel@suse.de" date="1626782400">- Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993,
  0001-trust-Support-CKA_NSS_-SERVER-EMAIL-_DISTRUST_AFTER.patch)
- add bcond to spec file to enable debug easily</changelog>
  <changelog author="meissner@suse.com" date="1638878400">- 0001-common-Use-reallocarray-instead-of-realloc-as-approp.patch
  0001-Check-for-arithmetic-overflows-before-allocating.patch
  0001-Follow-up-to-arithmetic-overflow-fix.patch:
  Fixed multiple integer overflows in rpc code (bsc#1180064
  CVE-2020-29361)</changelog>
</package>
<package pkgid="f049a99f69e98b03aaf6991969d76be5b95f3101122a7ec30d017bf4ebd78732" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.50.1"/>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
</package>
<package pkgid="f8357a21698592f3426844ae516f8437c3c529aeff193f386594478edc507324" name="pam-config" arch="x86_64">
  <version epoch="0" ver="1.1" rel="3.3.1"/>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
</package>
<package pkgid="cdf10dec21514b4d9c10a34bad4bfd1201cae66c297cfc71b6c0c198231e7cef" name="pam_apparmor" arch="x86_64">
  <version epoch="0" ver="2.13.6" rel="150300.3.11.2"/>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602158400">- %service_del_postun_without_restart only works for Tumbleweed,
  keep using DISABLE_RESTART_ON_UPDATE for Leap 15.x</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602676800">- add CAP_CHECKPOINT_RESTORE to severity.db (MR 656,
  cap_checkpoint_restore.diff)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1602936000">- update to AppArmor 2.13.5
  - add missing permissions to several profiles and abstractions
  - bugfixes in parser and tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.5
    for the detailed upstream changelog
- remove upstream(ed) patches
  - changes-since-2.13.4.diff
  - abstractions-X-xauth-mr582.diff
  - sevdb-caps-mr589.diff
  - libvirt-leaseshelper.patch
  - cap_checkpoint_restore.diff
- add libapparmor-so-number.diff to fix libapparmor so version (!658)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1607515200">- update to AppArmor 2.13.6
  - fix utils hotkey conflicts in some languages
  - aa-autodep: load abstractions on start (boo#1178527)
  - add usr.lib.dovecot.script-login profile
  - minor additions in abstractions/X and the dovecot profile
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.6
    for the detailed upstream changelog
- drop upstreamed patch libapparmor-so-number.diff</changelog>
  <changelog author="mcepl@suse.com" date="1634040000">- Be explicit about using python2 macros, when needed.</changelog>
  <changelog author="mcepl@suse.com" date="1634299200">- Don't provide python2 symbol for python3 package (bsc#1191690).</changelog>
  <changelog author="meissner@suse.com" date="1638273600">- fixed requires of python3 module (bsc#1191690).</changelog>
  <changelog author="nopower@suse.com" date="1641384000">- add add-samba-bgqd.diff: add profile for samba-bgqd;
  (bsc#1191532).</changelog>
  <changelog author="nopower@suse.com" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb;
  (bsc#1192684).</changelog>
</package>
<package pkgid="fcd75f447d094b9b00d51185efd3340c70ebebf89128c1491c051304a7cbcda7" name="pam_pkcs11" arch="x86_64">
  <version epoch="0" ver="0.6.10" rel="1.17"/>
  <changelog author="sbrabec@suse.cz" date="1294228800">- Updated to version 0.6.6:
  * Compatible with pcsc-lite-1.6.
  * New mapper API.
  * Minor fixes.
  * Translaton updates.</changelog>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
</package>
<package pkgid="c80aec10cc08092bf3ecfe169a84512e27a7880a8a84466a53c6aaa5931d2ea1" name="parted" arch="x86_64">
  <version epoch="0" ver="3.2" rel="19.1"/>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
</package>
<package pkgid="5869cbd2d8d6b9cf1ebb612b8a5e433b1a1cf465beb39a7a6b45e482447cba9d" name="patterns-microos-base" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="5f150b965b6ce6583a9d895cdc07654719f661baeff9e03bdeb377523e675170" name="patterns-microos-basesystem" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="42748251c52831fc59905e43d24819d0d0813245da4488114bb262988523f648" name="patterns-microos-bootloader" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="03cefeefaa00e4d3df27930d67be843499c6e6a3b669556568dac56712f400b2" name="patterns-microos-cockpit" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="e7ec3ff71ee8fc00b8862ddc7acc0b883182912f05258d03a9461e0a856c4e56" name="patterns-microos-container_runtime" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="1e6eba9757b5fedf44d37ba3033b8fc73a63fa2c6f08584af3a38f00a0ac295a" name="patterns-microos-defaults" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="f51ff2cb5ecc448c35de80812de06ff2eee4e729ef00983850c8a887267c28e7" name="patterns-microos-fips" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="4574b320dfa406362ab71e57ee690c25d32a413e023c7a183804ba0bdd19335b" name="patterns-microos-hardware" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="f585b89813e179aeb1b36cc048d0aec893018dd1b547edd18b329693f3ac9be8" name="patterns-microos-kvm_host" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="bfca0d2a0f721da55d985c686d4a8766dbf166f41fbdcdb6fb08e2fa778db6ea" name="patterns-microos-salt_minion" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="c6706a769b11b2d9431b17ac443d99c3342f2a0e521c60d00e0edc4ff53fdc58" name="patterns-microos-selinux" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="4a7687e47a007bd7491fc63cdb4ab36dee0195aee07e1562b2c7b7508ae08e1d" name="patterns-microos-sssd_ldap" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150300.4.1"/>
  <changelog author="jsrain@suse.com" date="1629115200">- remove the microos-k3s pattern</changelog>
  <changelog author="jsrain@suse.com" date="1629979200">- added sssd_ldap pattern</changelog>
  <changelog author="jsrain@suse.com" date="1630065600">- zypper-migration-plug-in now provided by suseconnect-ng</changelog>
  <changelog author="jsrain@suse.com" date="1631188800">- added the FIPS pattern (matching the one from SLES)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1635940800">- adjustments to be able to build for Leap (boo#1192518)</changelog>
  <changelog author="jsrain@suse.com" date="1639915200">- do not require kernel-default (bsc#1193955)</changelog>
  <changelog author="jsrain@suse.com" date="1643457600">- remove cockpit-dashboard (jsc#SMO-70)
- include cockpit-machines (jsc#SMO-46)</changelog>
  <changelog author="jsrain@suse.com" date="1643716800">- rename pattern microos_sssd_ldap to microos-sssd_ldap
  (bsc#1192462)</changelog>
  <changelog author="jsrain@suse.com" date="1643803200">- bump version to 5.2.0
- specify branding of systemd presets</changelog>
  <changelog author="jsrain@suse.com" date="1646136000">- make the salt_minion pattern visible
- 5.2.1</changelog>
</package>
<package pkgid="113f54d7cf8f24ed4ebff3e9b803aa5772417acd71febee152bb79fd457882f8" name="pciutils" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.3.1"/>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
</package>
<package pkgid="4f896527dfb5ab716c6df68848c9ade94fd0acde4655abe3393f5ffe295f93c7" name="pciutils-ids" arch="noarch">
  <version epoch="0" ver="20200324" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1491652800">- Update to 20170403</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update to 20170525</changelog>
  <changelog author="mpluskal@suse.com" date="1499688000">- Update to 20170710</changelog>
  <changelog author="mpluskal@suse.com" date="1505995200">- Update to 20170917</changelog>
  <changelog author="jengelh@inai.de" date="1505995201">- Rectify package summary.</changelog>
  <changelog author="mpluskal@suse.com" date="1508414400">- Update to 20171018</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Update to 20171021</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to 20171206</changelog>
  <changelog author="jdelvare@suse.com" date="1567166400">- Update to 20190830 (bsc#1133581, bsc#1127840)</changelog>
  <changelog author="jdelvare@suse.com" date="1587729600">- Update to 20200324 (bsc#1170160)</changelog>
</package>
<package pkgid="bb6baf7767f43b6eeb82bb7e57575d3cf441733100568a31ddfe82e657e81e2c" name="pcsc-ccid" arch="x86_64">
  <version epoch="0" ver="1.4.30" rel="1.14"/>
  <changelog author="wr@rosenauer.org" date="1452427200">- Updated to version 1.4.22
  * Add support of
    Aktiv Rutoken PINPad 2
    Aladdin R.D. JC-WebPass (JC600)
    Aladdin R.D. JCR-770
    Aladdin R.D. JaCarta
    Aladdin R.D. JaCarta Flash
    Aladdin R.D. JaCarta LT
    Aladdin R.D. JaCarta U2F (JC602)
    Athena ASEDrive IIIe Combo Bio PIV
    Athena ASEDrive IIIe KB Bio PIV
    GEMALTO CT1100
    GEMALTO K1100
    Hitachi, Ltd. Hitachi Biometric Reader
    Hitachi, Ltd. Hitachi Portable Biometric Reader
    Nitrokey Nitrokey Storage
    THURSBY SOFTWARE TSS-PK1
    Thursby Software Systems, Inc. TSS-PK7
    Thursby Software Systems, Inc. TSS-PK8
  * Patch for Microchip SEC1110 reader on Mac OS X (card events notification)
  * Patch for Cherry KC 1000 SC (problem was with a T=1 card and case 2 APDU)
  * Fix support of FEATURE_MCT_READER_DIRECT for the Kobil mIDentity visual reader
  * Set timeout to 90 sec for PPDU (Pseudo APDU) commands. This
    change allows the use of a Secure Verify command sent as a PPDU
    through SCardTransmit().
  * Fix a crash when reader reader initialization failed
  * Fix initialization bug with Gemalto Pinpad reader on Mac OS X
  * Some minor bugs fixed</changelog>
  <changelog author="wr@rosenauer.org" date="1461240000">- Updated to version 1.4.23
  * Add support of
    ACS ACR3901U ICC Reader
    Alcor Micro AU9560
    Cherry SmartTerminal XX44
    HID Global OMNIKEY 3x21 Smart Card Reader
    HID Global OMNIKEY 5022 Smart Card Reader
    HID Global OMNIKEY 6121 Smart Card Reader
    IonIDe Smartcard Reader reader
    KACST HSID Reader
    KACST HSID Reader Dual Storage
    KACST HSID Reader Single Storage
  * Remove support of
    VMware Virtual USB CCID
  * Fix a busy loop consuming 100% of CPU for some composite USB devices
    impacted readers: Yubico Yubikey NEO U2F+CCID and Broadcom BCM5880
  * Remove support of (unused) option DRIVER_OPTION_RESET_ON_CLOSE
  * log libusb error name instead of decimal value
  * Some minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1464609600">- Updated to version 1.4.24
  * Add support of
    Generic USB Smart Card Reader
    Giesecke &amp; Devrient GmbH StarSign CUT S
    HID AVIATOR Generic
  * better support of Elatec TWN4 SmartCard NFC
  * better support of SCM SCL011
  * fix SCARD_ATTR_VENDOR_IFD_SERIAL_NO attribute size
  * fix a race condition on card events with multiple readers
  * Some minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1475496000">- Updated to version 1.4.25
  * Add support of
    Aladdin R.D. JaCarta (idProduct: 0x0402)
    Broadcom Corp 5880 (idProduct: 0x5832)
    Broadcom Corp 5880 (idProduct: 0x5833)
    Broadcom Corp 5880 (idProduct: 0x5834)
    ESMART Token GOST X2 ET1020-A
    Feitian VR504 VHBR Contactless &amp; Contact Card Reader
    Feitian bR500
    Gemalto K50
    appidkey GmbH ID100-USB  SC Reader
    appidkey GmbH ID50 -USB
  * Remove suport of
    Broadcom Corp 5880 (idProduct: 0x5800)
    Broadcom Corp 5880 (idProduct: 0x5805)
    KEBTechnology KONA USB SmartCard
  * Fix crash with GemCore Pos Pro and GemCore Sim Pro
  * Some minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1483790400">- Updated to version 1.4.26
  * Add support of
    Bit4id Digital DNA Key
    Bit4id tokenME FIPS v3
    INGENICO Leo
    appidkey GmbH ID60-USB
  * PowerOn: the default algorithm is now 5V then 1.8V then 3V then fail.
    It is still possible to change the initial voltage in the
    Info.plist file.
    Now, in any case, all the values are tried before failing.
  * Negotiate maximum baud rate when bNumDataRatesSupported = 0
  * Some minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.4.27
  * Add support of
    ACS ACR1255U-J1
    ACS CryptoMate (T2)
    ANCUD CCID USB Reader &amp; RNG
    DUALi DE-620 Combi
    FT CCID
    FT CCID KB
    FT U2F CCID KB
    FT U2F CCID KBOARD
    HID Global OMNIKEY 5422 Smartcard Reader
    InfoThink IT-102MU Reader
    Kapsch TrafficCom USB SAM reader
    MK Technology KeyPass S1
    Mulann PVT
    Regula RFID Reader
    Spyrus Inc PocketVault P-3X
    Unicept GmbH AirID USB
  * Add Microchip SEC1210 UART support (when connected on a serial port)
  * Add Zero Length Packet (ZLP) support for Gemalto IDBridge CT30 and K30
    enable the patch using ./configure --enable-zlp
  * Add support of HID Omnikey 5422 as multi slot reader (for macOS)
  * Escape command: signals buffer overflow instead of silently
    truncating the buffer
  * Fix a bug with multi readers and pcscd uses hotplug_libusb
    (not the recommended configuration)
  * Some minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1508068800">- Updated to version 1.4.28
  * Add support of
    Athena IDProtect Flash
    Elatec TWN4/B1.06/CPF3.05/S1SC1.32/P (Beta 3)
    HID Global OMNIKEY 5122 Dual
    HID Global OMNIKEY 5122 Smartcard Reader
    IIT E.Key Crystal-1
    KRONEGGER Micro Core Platform
    KRONEGGER NFC blue Reader Platform
    Ledger Nano S
    REINER SCT cyberJack RFID standard
    REINER SCT cyberJack one
    SAFETRUST SABRE SCR
    SafeNet eToken 5300
    Unicept GmbH AirID USB Dongle
    Watchdata USB Key
    mCore SCard-Reader
  * Disabled readers
    Jinmuyu Electronics Co., Ltd. MR800
  * Fix non-pinpad HID global devices
  * udev rules
    allow rule overwrite
    disable USB autosuspend on C3PO LTC31 v1 reader
  * some minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1519560000">- Updated to version 1.4.29
  * Add support of
    Access IS NFC Smart Module (With idProduct 0x0164)
    Bit4id Digital-DNA Key
    Bit4id Digital-DNA Key BT
    Bluink Ltd. Bluink CCID
    Chicony HP Skylab USB Smartcard Keyboard
    HID Global OMNIKEY 5023 Smart Card Reader
    HID Global OMNIKEY 5027CK CCID CONFIG IF
    KeyXentic Inc. KX906 Smart Card Reader
    Spyrus Inc Rosetta USB
    Spyrus Inc WorkSafe Pro
    Watchdata USB Key (idProduct: 0x0418)
  * The C3PO LTC31 v2 wrongly declares PIN support
  * Remove extra EGT patch because it has bad side effects</changelog>
  <changelog author="wr@rosenauer.org" date="1537617600">- Updated to version 1.4.30
  * The project moved to https://ccid.apdu.fr/
  * Add support of
    ACS ACR33 ICC Reader
    BIFIT ANGARA
    Broadcom Corp 58200
    Certgate GmbH AirID 2 USB
    DC.Ltd DC4 5CCID READER
    Genesys Logic CCID Card Reader
    Genesys Logic Combo Card Reader
    InfoThink IT-500U Reader
    Spyrus Inc WorkSafe Pro (ProductID 0x3117)
  * Disabled readers
    REINER SCT cyberJack RFID standard
  * Update reader names for
    Fujitsu Keyboard KB100 SCR
    Fujitsu Keyboard KB100 SCR eSIG
    FujitsuTechnologySolutions GmbH Keyboard KB SCR2
    Yubico YubiKey CCID
    Yubico YubiKey FIDO+CCID
    Yubico YubiKey OTP+CCID
    Yubico YubiKey OTP+FIDO+CCID
  * Fix libusb config descriptor leak
  * Fix leaking an allocated bundle in case no matching reader was found</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update URL.</changelog>
</package>
<package pkgid="4d33d9a7682006b8dcb2dac9fd772ac79d0e330b039d7c7520f52be3873a2519" name="pcsc-lite" arch="x86_64">
  <version epoch="0" ver="1.8.24" rel="1.14"/>
  <changelog author="wr@rosenauer.org" date="1483099200">- Updated to version 1.8.20
  * Fix a crash and potential security issue in pcscd (bsc#1017902,
    CVE-2016-10109, CWE-415, CWE-416)</changelog>
  <changelog author="wr@rosenauer.org" date="1495454400">- Updated to version 1.8.21
  * SCardCancel():
  - fix a race condition bug
  - fix a possible use after free
  - improve Doxygen documentation
  * SCardGetStatusChange(): fix a race condition when a reader is removed
  * SCardDisconnect(): fix status update for SCARD_UNPOWER_CARD
  * pcsc_stringify_error(): use Thread-local storage
  * pcsc_stringify_error() now returns a const char *
  * SCardControl() may return SCARD_E_INSUFFICIENT_BUFFER when
    pbRecvBuffer is not big enough to receive the card response.
  * Fix compilation error with GCC 4.9
  * UnitaryTests: add support of Python 3
  * pcsc-spy: add support of Python 3
  * Some other minor improvements</changelog>
  <changelog author="wr@rosenauer.org" date="1497700800">- Updated to version 1.8.22
  * SCardCancel() was broken in 1.8.21. The call was blocking.
  * Enable use of info level logging for pcscd using -i/--info</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Rename local defines USER/GROUP to PKG_USER/PKG_GROUP: the
  variable GROUP (call caps) has been claimed by RPM 4.14.</changelog>
  <changelog author="wr@rosenauer.org" date="1514808000">- Updated to version 1.8.23
  * use libsystemd instead sd-daemon.{c,h}
  * spy: add support SCardStatus() with NULL pcbAtrLen
  * Some other minor improvements
- remove --auto-exit from service start even if we have
  socket activation in place
  (using it as a lightweight approach to unconditional service
  enablement (reference boo#1063983 and to help workaround boo#1063985)</changelog>
  <changelog author="sbrabec@suse.com" date="1519992000">- Use python3 (bsc#1082129, pcsc-lite-python3.patch).</changelog>
  <changelog author="wr@rosenauer.org" date="1535976000">- extended sysconfig template to include
  PCSCLITE_FILTER_IGNORE_READER_NAMES env variable which is used
  by pcscd to ignore certain readers
  (patch by Eric Garreau)</changelog>
  <changelog author="wr@rosenauer.org" date="1539432000">- Updated to version 1.8.24
  * SCardGetStatusChange(): Fix a rare race condition
  * SCardReleaseContext(): do not release a lock owned by another context
  * SCardReconnect(): suspend card auto power off
  * Allow "=" in serial driver filenames
  * Add the thread id in the pcscd log lines
  * pcsc-spy: correctly handle incomplete log file
  * Simclist: avoid to divide by zero in list_findpos()
  * Some other minor improvements</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Trim filler wording from description.</changelog>
</package>
<package pkgid="bd08bfb10a131005f161e5a17250f53d00f09a92fd44550c47f49257ecfce571" name="pcsc-tools" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="3.4.1"/>
  <changelog author="wr@rosenauer.org" date="1389960000">- Update to version 1.4.22:
  * 215 new ATRs
  * Fetch a new ATR file if it was not upgraded in the last 10
    hours.
  * Propose to use http://smartcard-atr.appspot.com/parse to submit a
    new ATR
  * minor fixes</changelog>
  <changelog author="wr@rosenauer.org" date="1411214400">- Update to version 1.4.23
  * many new ATRs
- fixed perl-pcsc package name (bnc#897046)</changelog>
  <changelog author="wr@rosenauer.org" date="1439035200">- Update to version 1.4.24
  * 253 new ATRs
  * ATR_analysis: better update of the local cache</changelog>
  <changelog author="wr@rosenauer.org" date="1446984000">- Update to version 1.4.25
  * 44 new ATRs
  * ATR_analysis: fix the update of the local cache</changelog>
  <changelog author="wr@rosenauer.org" date="1458475200">- Update to version 1.4.26
  * 77 new ATRs
  * ATR_analysis: fix display the submission message
  * fix typos in pcsc_scan.1 and scriptor.1p man pages</changelog>
  <changelog author="astieger@suse.com" date="1497960000">- update to 1.5.2:
  * build system updates, now using autoconf/automake
  * many new new ATRs
  * pcsc_scan: various improvements to stress mode
  * documentation updates
  * Handle "simultaneous" readers removal</changelog>
  <changelog author="wr@rosenauer.org" date="1524312000">- update to 1.5.3
  * 253 new ATRs
  * pcsc_scan
  - add -v argument (default) for verbose
  - add -q argument for quiet
  - add -r argument to display the reader list
  - allow to use Control-C to break execution</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 1.5.4:
  * Port to gtk+-3.
  * gscriptor: save and restore the window size, remove
    unimplemented Logo.
  * many new ATRs
  * warning fixes</changelog>
  <changelog author="jengelh@inai.de" date="1549108800">- Update summary.</changelog>
  <changelog author="wr@rosenauer.org" date="1566216000">- added missing dependencies for gscriptor (boo#1145779)</changelog>
</package>
<package pkgid="139643e194614a4aa04df47bd1d9aa4176e3f93f90426edd3381720f0035b71f" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="15.87"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
</package>
<package pkgid="b3553949524ccb48a68869c16ce437d68fb115d09ea1a93b69824c34eefb7b88" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.936" rel="3.3.1"/>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
</package>
<package pkgid="fced77dbd0774c8f1bff7148725def95d9812fb7153432907b6b601ad99e5207" name="perl-String-ShellQuote" arch="noarch">
  <version epoch="0" ver="1.04" rel="2.17"/>
  <changelog author="lnussel@suse.de" date="1273060800">- new package version 1.03 created using cpanspec</changelog>
  <changelog author="jw@novell.com" date="1277467200">- 1.04
  - Don't escape "=" unless it's in command position.  Thanks to Chip
    for the inspiration.
  - Use "#!perl" in test.t (closes #38072).
  - Don't try to test or install the shell-quote script on Windows
    (closes #46445).</changelog>
  <changelog author="coolo@novell.com" date="1291118400">- switch to perl_requires macro</changelog>
  <changelog author="dmueller@suse.com" date="1372075200">- fix license string</changelog>
  <changelog author="dimstar@opensuse.org" date="1516276800">- Remove duplicate BuildArch: noarch.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516363200">- Cleaned spec file with spec-cleaner</changelog>
</package>
<package pkgid="b40fa765ab3ba233e0944221fe110d15fb5cd43f5e8c17e1a9b4bbc3173953af" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="0" ver="1.38.0" rel="13.73"/>
  <changelog author="ohering@suse.de" date="1528718400">- Remove zerofree from BuildRequires because only supermin will
  consider this feature at runtime.</changelog>
  <changelog author="ldewey@suse.com" date="1554724800">- Fixing issue with virt-customize uninstall and '-l'
  (bnc#1131342)
  Patches added:
    fd43730e-error-with-uninstall-option-on-SUSE.patch</changelog>
  <changelog author="ldewey@suse.com" date="1555502400">- Fixing issue with virt-customize in SLES and openSUSE guests
  (boo#1132790)
  Patches added:
    28bd06227b-inspect-handle-os-release-opensuse-tumbleweed-as-ope.patch
    70407cd622-inspection-Parse-os-release-opensuse-leap-as-opensus.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1566475200">- Remove empty /etc/libguestfs-tools.conf</changelog>
  <changelog author="gmoro@suse.com" date="1566993600">- Add sysconfig-netconfig to appliance (boo#1136878)
  Patches added:
    netconfig.patch</changelog>
  <changelog author="ldewey@suse.com" date="1568030400">- Added lvm2 to Requires for using virt-resize of xfs images.
  (bsc#1138860)</changelog>
  <changelog author="christophe@krop.fr" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="carnold@suse.com" date="1584619200">- bsc#1167131 - virt-v2v fails importing ubuntu 18.04 LTS ova
  500acb15-v2v-linux-fix-kernel-detection-when-split-in-different-packages.patch</changelog>
  <changelog author="carnold@suse.com" date="1604577600">- bsc#1178495 - Leap Gap: Libguestfs.spec contains the is_opensuse
  macro
  libguestfs.spec</changelog>
</package>
<package pkgid="e316d4dbf1366281396f4b44c8c6a6069863934fd5b7a22cd87292d371ef848a" name="perl-Win-Hivex" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.6.1"/>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
  <changelog author="carnold@suse.com" date="1629979200">- bsc#1189060 - VUL-0: CVE-2021-3622: hivex: hivex: stack overflow
  due to recursive call of _get_children()
  CVE-2021-3622-stack-overflow-due-to-recursive-call-of-_get_children.patch</changelog>
</package>
<package pkgid="2bfad7b144c98a1b599fc762bacfc5d82000e996b2043435ab871023e803711a" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="15.87"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
</package>
<package pkgid="6044f26a3d093ee2eea10ce90bcc85a99d4709f402a48cb984ab3538117bfc27" name="perl-libintl-perl" arch="x86_64">
  <version epoch="0" ver="1.29" rel="1.17"/>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1443096000">- update to 1.24
  * Better portability for tests.
  * Updated documentation.
  * License changed to GPLv3.
  * Bugs fixed:
    https://rt.cpan.org/Ticket/Display.html?id=98109
    https://rt.cpan.org/Ticket/Display.html?id=47968
    https://rt.cpan.org/Ticket/Display.html?id=83980
    https://rt.cpan.org/Ticket/Display.html?id=102288
  Version 1.23 - 24 Jan 2013
  * New message retrieval backend Locale::gettext_dumb(3pm) which produces
    translations even, when the corresponding locale is not present in
    the system.
  * Fixed a bug where the Perl backend under certain circumstances clobbered
    the environment variable LC_ALL.
  * Avoid test failures by skipping all tests that depend on the de_AT
    locale, when that locale is not installed.
  * Bugs fixed:
    https://rt.cpan.org/Ticket/Display.html?id=82856
  Version 1.22 - 24 Jan 2013
  * Version 1.22 outsmarted PAUSE (the CPAN upload facility) and had to
    be removed.
  Version 1.21 - 15 Jan 2013
  * Environment variables LANGUAGE and LANG are interpreted in the same way
    in the XS and the pure Perl version.
  * Package design closer to GNU standards.</changelog>
  <changelog author="coolo@suse.com" date="1464782400">- update to 1.25
  * Fixed false negatives in test suite, no need to upgrade the module!
  * Bugs fixed:
    https://rt.cpan.org/Ticket/Display.html?id=83980
    https://rt.cpan.org/Ticket/Display.html?id=47968</changelog>
  <changelog author="coolo@suse.com" date="1466683200">- updated to 1.26
  * Fixed more false negatives in tests, no need to upgrade.</changelog>
  <changelog author="coolo@suse.com" date="1502280000">- updated to 1.27
  see /usr/share/doc/packages/perl-libintl-perl/ChangeLog</changelog>
  <changelog author="coolo@suse.com" date="1504267200">- updated to 1.28
  see /usr/share/doc/packages/perl-libintl-perl/ChangeLog
  commit 2e9b2284883b84eab39cc45eb864d6688ba2f930
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Thu Aug 31 21:56:12 2017 +0300
    bumped version number to 1.28
  commit c9cd1546061ed7b2973ea81fd2427b610c87d134
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Thu Aug 31 21:48:36 2017 +0300
    git ignore in sample
  commit f25061d0fbd8a287cdaa69e1b92737cc1d4e3b90
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:52:14 2017 +0300
    editorial changes
  commit 53aab676068c1da95498c91b316d7125f8427e79
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:50:07 2017 +0300
    use new class methods for xgettext options
  commit a6e4ee63d6a33ff9b49a061d239d76a69618bf45
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:30:44 2017 +0300
    quote import tags in docs
  commit 63e7345ee6a78b172770a6910052b18bfe7e0c55
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:23:58 2017 +0300
    updated copyright date
  commit 2ac9ce9e79f51697c44e5910e2620fcd77c858b4
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:21:54 2017 +0300
    git ignore
  commit 9a5dc45010d68cc0b8decc728b413770f27aed6b
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:15:39 2017 +0300
    updated FAQ
  commit 6753d9718d605ef11627bc79082e3e8dbe23958a
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 22:03:54 2017 +0300
    new class methods options, flags, and keywords
    This will produce the default keyword and flag definitions for xgettext
    for Locale::TextDomain.
  commit f2b9d789f3ec7176ef79c17d71d29f9b191f5909
  Author: Guido Flohr &lt;guido.flohr@cantanea.com&gt;
  Date:   Wed Aug 30 21:57:05 2017 +0300
    updated ChangeLog</changelog>
  <changelog author="coolo@suse.com" date="1510315200">- updated to 1.29
  see /usr/share/doc/packages/perl-libintl-perl/Changes</changelog>
</package>
<package pkgid="af0d03edbb6da532a3d5a7d1a2e69d265ceb53ef39f392feefeef156553c7a50" name="perl-pcsc" arch="x86_64">
  <version epoch="0" ver="1.4.14" rel="1.32"/>
  <changelog author="sbrabec@suse.cz" date="1313582400">- New package, version 1.4.10.</changelog>
  <changelog author="sbrabec@suse.cz" date="1313668800">- Fix build for older products.</changelog>
  <changelog author="mardnh@gmx.de" date="1417608000">- update to version 1.4.13
- corrected Source URL
- ran spec-cleaner
- removed patch: pcsc-perl-noSCardSetTimeout.patch (included in upstream since 1.4.11)
- Changes since 1.4.10:
  * PCSC.pm: Support Perl 5.16
  Remove the warning:
  defined(@array) is deprecated at /usr/lib/perl/5.16.3/Chipcard/PCSC.pm line 69.
    (Maybe you should just omit the defined()?)
  Thanks to Viliam Pucik for the bug report
  * PCSC.xs: Also check for SVt_PVIV and not just SVt_IV.
  * PCSC.xs, PCSC.pm, test.pl: Use lines of less than 80 columns
  * PCSCperl.h: SCardCancelTransaction() is no more present in pcsc-lite
  * PCSC.pm, PCSC.pod, PCSC.xs, PCSCperl.h:
    SCardSetTimout is no more present in pcsc-lite &gt; 1.6.4
    It was a pcsc-lite specific and deprecated function</changelog>
  <changelog author="sbrabec@suse.com" date="1501502400">- Update to version 1.4.14:
  * Error processing fixes.
- Add gpg.keyring and pcsc-perl-1.4.14.tar.bz2.asc.</changelog>
</package>
<package pkgid="6b1ed2cef6e745e13818c3496bfebd679590a1dd82f9a7a23f8cde2fc0257d7d" name="permissions" arch="x86_64">
  <version epoch="0" ver="20181225" rel="23.12.1"/>
  <changelog author="malte.kraus@suse.com" date="1583150400">- run testsuite during package build
- Update to version 20181224:
  * testsuite: adapt expected behavior to legacy branches
  * adjust testsuite to post CVE-2020-8013 link handling
  * testsuite: add option to not mount /proc
  * do not follow symlinks that are the final path element: CVE-2020-8013, bsc#1163922
  * add a test for symlinked directories
  * fix relative symlink handling
  * regtest: fix the static PATH list which was missing /usr/bin
  * regtest: also unshare the PID namespace to support /proc mounting
  * Makefile: force remove upon clean target to prevent bogus errors
  * regtest: by default automatically (re)build chkstat before testing
  * regtest: add test for symlink targets
  * regtest: make capability setting tests optional
  * regtest: fix capability assertion helper logic
  * regtests: add another test case that catches set*id or caps in world-writable sub-trees
  * regtest: add another test that catches when privilege bits are set for special files
  * regtest: add test case for user owned symlinks
  * regtest: employ subuid and subgid feature in user namespace
  * regtest: add another test case that covers unknown user/group config
  * regtest: add another test that checks rejection of insecure mixed-owner paths
  * regtest: add test that checks for rejection of world-writable paths
  * regtest: add test for detection of unexpected parent directory ownership
  * regtest: add further helper functions, allow access to main instance
  * regtest: introduce some basic coloring support to improve readability
  * regtest: sort imports, another piece of rationale
  * regtest: add capability test case
  * regtest: improve error flagging of test cases and introduce warnings
  * regtest: support caps
  * regtest: add a couple of command line parameter test cases
  * regtest: add another test that checks whether the default profile works
  * regtests: add tests for correct application of local profiles
  * regtest: add further test cases that test correct profile application
  * regtest: simplify test implementation and readability
  * regtest: add helpers for permissions.d per package profiles
  * regtest: support read-only bind mounts, also bind-mount permissions repo
  * tests: introduce a regression test suite for chkstat</changelog>
  <changelog author="jsegitz@suse.com" date="1585051200">- whitelist s390-tools setgid bit on log directory (bsc#1167163)</changelog>
  <changelog author="jsegitz@suse.com" date="1585828800">- correct spelling of icinga group (icingagmd -&gt; icingacmd, bsc#1168364)</changelog>
  <changelog author="jsegitz@suse.com" date="1589198400">- Remove setuid bit for newgidmap and newuidmap in paranoid profile
  (bsc#1171173)</changelog>
  <changelog author="malte.kraus@suse.com" date="1590667200">- whitelist texlive public binary (bsc#1171686)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1591099200">- Update to version 20181224:
  * profiles: add entries for enlightenment (bsc#1171686)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611230400">- Update to version 20181224:
  * pcp: remove no longer needed / conflicting entries
    (bsc#1171883, CVE-2020-8025)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619784000">- Update to version 20181225:
  * etc/permissions: remove unnecessary entries (bsc#1182899)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1640174400">- Update to version 20181225:
  * drop ping capabilities in favor of ICMP_PROTO sockets (bsc#1174504)</changelog>
  <changelog author="jsegitz@suse.com" date="1642161600">- Update to version 20181225:
  * setuid bit for cockpit session binary (bsc#1169614)</changelog>
</package>
<package pkgid="9c85bf3ef1a7d151f186f72b58ea364a86aef4a3b8279d4645b77088b084029b" name="pigz" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="1.28"/>
  <changelog author="jmatejek@suse.de" date="1256040000">- initial package</changelog>
  <changelog author="visnov@suse.de" date="1267617600">- include symlinks patch</changelog>
  <changelog author="agraf@suse.de" date="1271678400">- fix dictzip with #CPU == 1 (bnc#597756)</changelog>
  <changelog author="visnov@suse.cz" date="1307016000">- update to 2.1.6
- package unpigz
- create debug packages
- package manpage</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build workaround: use fake cc script to work around build
  system that does not honor CC</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1354017600">- update to 2.2.5:
  * add --rsyncable functionality
  * many bug fixes
- remove all suse patches:
  * pigz-dictzip.patch, large and unmaintained patch. If somebody
    really needs that then we should rebase and test it. In this
    case --dictzip should be probably also added to original gzip.
  * pigz-always-thread.patch was a folloup of pigz-dictzip.patch
  * pigz-do-symlinks.patch added IMO dangerous and stupid behaviour
    for symlinks. The original behaviour is now again like we know
    it from gzip, bzip2 and xz.
  * pigz-spl.patch, why we hacked in special handling of .spl
    files?
  * Generally we want to have pigz to replace gzip (and vice versa)
    so better avoiding interface incompatibilities.
- cleanup spec file</changelog>
  <changelog author="adam@mizerski.pl" date="1363262400">- update to 2.3
  * Don't complain about missing suffix when not writing output file
  * Put all global variables in one global structure for readability
  * Do not decompress concatenated zlib streams -- only gzip streams
  * Add option for compression level 11 to use zopfli
  * Fix handling of junk after compressed data
- added pigz-lm.patch
  * adds missing "-lm"
- provide unpigz binary and manpage as symlink, not copy.
- removed fake cc script - build system honors CC
- cleanup spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1426075200">- Update to version 2.3.3
  * Portability improvements
  * Update copyright years in documentation
- Add build fix patches
  * pigz-fix-wrong-include.patch
  * pigz-fix-missing-linker.patch
- Remove pigz-lm.patch; fixed
- Use download Url as source</changelog>
</package>
<package pkgid="a613a30c8eeec23fc36773764ddbf413d3e5068c2956bae4897bac5ca693987f" name="pinentry" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="4.3.1"/>
  <changelog author="dmueller@suse.com" date="1445428800">- add pinentry-qt4-fix-qstring-conversion.patch (bsc#951307)</changelog>
  <changelog author="andreas@suse.de" date="1450094400">- pinentry 0.9.7:
  * Fix regressions in the Qt pinentry.
  (previsouly patched, removed
  pinentry-qt4-fix-qstring-conversion.patch)
  * Fix minor problems pinnetyr-tty.
  * New option --invisible-char.</changelog>
  <changelog author="tchvatal@suse.com" date="1452686400">- Use qt5 instead of qt4 in pinentry-qt</changelog>
  <changelog author="astieger@suse.com" date="1453291200">- completely rename to qt5 [boo#962076]
- fix self-deprecation rpmlint warning</changelog>
  <changelog author="tchvatal@suse.com" date="1469793600">- Update the conflict to bring back the self-deprecation broken in
  previous change wrt boo#989554</changelog>
  <changelog author="astieger@suse.com" date="1481716800">- pinentry 1.0.0:
  * Qt pinentry now supports repeat mode in one dialog.
  * Qt and GTK pinentries now make it possible to show the entered
    value.
  * Qt pinentry now only grabs the keyboard if an entry field is
    focused.
  * Fixed potential crash in Qt qualitybar calculation.
  * GTK keyboard grabbing is now a bit more robust.  The cursor is
    changed to a big dot as a visual indication that a pinentry
    has popped up and is waiting for input.
  * The GNOME pinentry now falls back to curses if it can't use the
    GCR system prompter or a screenlock is active.
  * Fixed error output for cached passwords.
  * A show/hide passphrase button or checkbox is now available with
    some pinentry flavors.
  * Improved diagnostics and error codes.</changelog>
  <changelog author="tchvatal@suse.com" date="1481803200">- Build pinentry tui in build and not during install</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- pinentry 1.1.0:
  * Add FLTK1.3-based pinentry
  * New option --ttyalert for pinentry-curses to alert the user.
  * Don't show "save passphrase" checkbox if secret service is
    unavailable.
  * The GTK Pinentry shows on Linux some information anout the
    process which invoked the Pinentry.
  * The GTK Pinentry does not anymore show tooltips when keyboard
    grabbing is enabled.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1564056000">- Fix a dangling pointer in qt/main.cpp [bsc#1141883]
  * Added pinentry-qt-Fix-use-of-dangling-pointer.patch</changelog>
</package>
<package pkgid="d390a271e9106234c5f2b4d46d89117cd0f7492f2a74a21122003db7c87ff9ea" name="pkg-config" arch="x86_64">
  <version epoch="0" ver="0.29.2" rel="1.436"/>
  <changelog author="dimstar@opensuse.org" date="1342612800">- Update to version 0.27:
  + Drop usage of popt for equivalent API in glib2
  + Add back an internal snapshot of glib2 to break circular
    dependency
  + Fix --exists to check for Requires and Requires.private.
  + Various fixes for MinGW which should allow it to be used
    unpatched on that system
  + New autoconf macros PKG_INSTALLDIR and PKG_NOARCH_INSTALLDIR to
    help determine the .pc file install directory
  + Fix handling of --exact/atleast/max-version vs. =/&gt;=/&lt;=
  + Fix errors in man page source
  + Ensure testing only searches in the check directory
  + Bump glib requirement to 2.16 to avoid deprecated
    g_win32_get_package_installation_subdirectory()
  + Autotools refresh and update
  + Use g_alloca from glib instead of figuring out alloca ourselves
  + Remove search for setresuid &amp; setreuid only needed for internal
    popt
  + Bugs fixed: fdo#833, fdo#2458, fdo#5214, fdo#5326, fdo#5703,
    fdo#6074, fdo#8653, fdo#9135, fdo#9143, fdo#9584, fdo#10652,
    fdo#11464, fdo#14396, fdo#17053, fdo#23922, fdo#28776,
    fdo#29011, fdo#29801, fdo#31699, fdo#31700, fdo#32622,
    fdo#34382, fdo#37266, fdo#39646, fdo#41081, fdo#43149,
    fdo#44843, fdo#45599, fdo#45742, fdo#48743
- Changes from version 0.26:
  + Build system fixes
  + More tests
  + pkg.m4 fixups which makes autoconf 2.66 happier.
  + Drop support for legacy -config scripts.  Those should already
    be gone and cause problems in cross-compilation environments.
  + Drop embedded glib
  + Fix up pkg.m4 to handle the case of --exists working and
  - -cflags or --libs failing.
  + Various documentation updates
  + Allow $() through without escaping it.
  + Add --with-system-include-path instead of hard-coding
    /usr/include.
- Pass --with-internal-glib to configure. We don't want to have a
  build cycle with glib, so we use the interal version.
- Clean up spec-file using spec-cleaner and manually.
- Drop pkg-config-dnl.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346068800">- Update to version 0.27.1:
  + Various fixes for using the internal glib snapshot. It should
    now be usable pretty much everywhere with the exception that
    universal builds are not supported on OS X.
  + Remove usage of gettext from the internal glib to avoid gettext
    and libintl dependencies
  + Update internal glib snapshot to 2.32.4
  + Fix check for POSIX shell used in tests to work better
  + Handle spaces in autodetected prefix on Windows
  + Bugs fixed: fdo#3550, fdo#51883, fdo#52031, fdo#53493.</changelog>
  <changelog author="p.drouand@gmail.com" date="1360065600">- Update to version 0.28:
  + Fixed a pair of long-standing and intertwined bugs involving
    unwanted removal of flags:
  - Other Libs flags like -Wl are now kept in context order
    with -l flags.
  - Aggressive removal of all duplicate arguments has been scaled
    back so that just consecutive duplicate arguments are
    removed. One result of this change is that some flags could
    be repeated in the final output, especially flags from
    non-pkg-config packages like -lm. Since pkg-config rarely has
    enough knowledge here about the right thing to do, we throw
    the duplicate arguments at the compiler/linker and trust it
    will do the right thing.
  + Fixed an old bug to allow circular Requires. This fix brings
    along a small behavior change in that pkg-config resolves
    requires depth first, causing some lower level flags to show up
    earlier in the output than previously.
  + Cleaned up many corner-case bugs and ambiguous behavior in
    pkg-config's interface.
  + New autoconf macro PKG_CHECK_VAR for reading variables from .pc
    files.
  + Default to suppressing -L/lib and/or -L/lib64 like their /usr
    counterparts.
  + To help support multiarch scenarios out of the box,
    $host-pkg-config is now installed unless --disable-host-tool
    is passed to configure.
  + Added optional gcov usage through the --with-gcov configure
    option. As a result, many more tests were added to greatly
    increase the coverage of the code to 86% of executed lines on a
    Fedora 18 machine.
  + Bugs fixed: fdo#130, fdo#7331, fdo#16101, fdo#17053, fdo#19950,
    fdo#34504, fdo#48098, fdo#54231, fdo#54271, fdo#54379,
    fdo#54384, fdo#54386, fdo#54388, fdo#54389, fdo#54390,
    fdo#54391, fdo#54427, fdo#54463, fdo#54716, fdo#57078,
    fdo#58363, fdo#59435.</changelog>
  <changelog author="dvaleev@suse.com" date="1365076800">- Don't redefine _arch, but use file pattern instead. This ensures
  we don't have to run fixing each and every arch.</changelog>
  <changelog author="dmueller@suse.com" date="1372420800">- fix filelist glob for armv6hl/armv6hl (which is a gnueabi target)</changelog>
  <changelog author="ro@suse.de" date="1391601600">- Fix filelist for s390 (it is ibm-linux there).</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.29:
  + Fixed a regression from 0.28 in system -L flag handling. If the
    pc file has multiple system -L flags, every other flag will be
    left as is (fdo#78077).
  + Quoting of variables queried through --variable is removed so
    that the output can be used verbatim in subsequent shell
    commands (fdo#67904).
  + Fixed a regression from 0.28 in -L flag handling on Windows. A
    .libs suffix was inadvertantly being added to the library path.
  + Added a --validate option to check pc file syntax. This works
    just like --exists, but package dependencies are disabled
    (fdo#7000).
  + Added the PKG_PREREQ autoconf macro. Whereas
    PKG_PROG_PKG_CONFIG is used to check the version of the
    pkg-config tool, this is used to check the version of the
    pkg-config autoconf macros in use.
  + Added the PKG_CHECK_MODULES_STATIC autoconf macro. This will
    temporarily add --static to the pkg-config calls while invoking
    PKG_CHECK_MODULES (fdo#19541).
  + Many fixes to the testsuite for Windows. It should now pass for
    a MinGW, Cygwin, and cross-compiled MinGW using Wine for test
    execution (fdo#66939).
  + More consistent handling of prefix redefinition. On Windows,
    the prefix was always being redefined based on the pc file
    path. This feature can now be enabled or disabled at runtime on
    all platforms using the --define-prefix and
  - -dont-define-prefix options (fdo#63602).
  + Continue listing packages with --list-all even if there are
    errors in pc files (fdo#26615).
  + Various documentation improvements (fdo#62018, fdo#62374,
    fdo#66155).
  + Fixed a bug when multiple -isystem arguments are used
    (fdo#72584).
  + pkg-config is now built with largefile support to ensure that
    it works correctly on filesystems with 64 bit inodes
    (fdo#90078).
  + Bugs fixed: fdo#7000, fdo#19541, fdo#26615, fdo#62018,
    fdo#62374, fdo#63602, fdo#66155, fdo#66939, fdo#67904,
    fdo#70690, fdo#72584, fdo#78077, fdo#80378, fdo#80380,
    fdo#89267, fdo#90078, fdo#90437, fdo#92002.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457179200">- Update to version 0.29.1:
  + Fixed a regression from 0.29 with unquoting values queried with
  - -variable. In some cases, this would cause shell special
    characters to be escaped in ways they weren't before. Instead,
    the unquoting only occurs if the value appears to be quoted
    (fdo#93284).
  + Add support for building pkg-config with Microsoft Visual
    Studio (fdo#92489).
  + Allow overriding pkg-config variables with environment
    variables. By setting an environment variable of the form
    PKG_CONFIG_$PACKAGE_$VARIABLE, a pkg-config variable can be set
    globally without always having to pass --define-variable
    (fdo#90917).
  + Honor -Wl,-framework in addition to -framework so that multiple
    frameworks are handled on OSX (fdo#1278).
  + Fix the OSX build using --with-internal-glib (fdo#92902).</changelog>
  <changelog author="mliska@suse.cz" date="1489579200">- Add pkg-config-gdate-fix.patch: enable building with GCC7, taken
  from upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1493121600">- Update to version 0.29.2:
  + Improved pkg-config's recursive package list expansion
    performance.
  + Handle an empty prefix setting correctly when --define-prefix
    is used (fdo#97453).
  + Lazily load pc files instead of reading all available pc files
    during initialization (fdo#98215).
  + Check the CPATH environment variable when determining system
    include paths like GCC does. Document the system search path
    behavior (fdo#99224).
  + Make PKG_CHECK_MODULES show the module list rather than the
    variable prefix in configure output (fdo#98334).
  + Fix bundled glib build with GCC 6 (fdo#98334).
  + Handle -isystem and -idirafter when PKG_CONFIG_SYSROOT_DIR is
    set (fdo#97337).
  + Check the INCLUDE environment variable when determining system
    include paths on Windows builds when --msvc-syntax is used
    (fdo#94729).
- Drop pkg-config-gdate-fix.patch: fixed upstream.</changelog>
</package>
<package pkgid="10b969fe790b224add8417ab331ed3ee125ad1314d977d30d73e28ae88b5d4c7" name="podman" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150300.9.3.2"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1629720000">- Revert crun change due to crun having exclusive arch targets
  that would drop podman support in PPC and IBM Z</changelog>
  <changelog author="michael@stroeder.com" date="1630411200">- Update to version 3.3.1:
  * Bugfixes
  - Fixed a bug where unit files created by podman generate systemd could
    not cleanup shut down containers when stopped by systemctl stop (#11304).
  - Fixed a bug where podman machine commands would not properly locate
    the gvproxy binary in some circumstances.
  - Fixed a bug where containers created as part of a pod using the
  - -pod-id-file option would not join the pod's network namespace (#11303).
  - Fixed a bug where Podman, when using the systemd cgroups driver,
    could sometimes leak dbus sessions.
  - Fixed a bug where the until filter to podman logs and podman events
    was improperly handled, requiring input to be negated (#11158).
  - Fixed a bug where rootless containers using CNI networking run on
    systems using systemd-resolved for DNS would fail to start if resolved
    symlinked /etc/resolv.conf to an absolute path (#11358).
  * API
  - A large number of potential file descriptor leaks from improperly closing
    client connections have been fixed.</changelog>
  <changelog author="michael@stroeder.com" date="1630584000">- require runc &gt;= 1.0.1</changelog>
  <changelog author="michael@stroeder.com" date="1633089600">- Update to version 3.4.0:
  * Features
  - Pods now support init containers! Init containers are containers which run before the rest of the pod starts. There are two types of init containers: "always", which always run before the pod is started, and "once", which only run the first time the pod starts and are subsequently removed. They can be added using the podman create command's --init-ctr option.
  - Support for init containers has also been added to podman play kube and podman generate kube - init containers contained in Kubernetes YAML will be created as Podman init containers, and YAML generated by Podman will include any init containers created.
  - The podman play kube command now supports building images. If the --build option is given and a directory with the name of the specified image exists in the current working directory and contains a valid Containerfile or Dockerfile, the image will be built and used for the container.
  - The podman play kube command now supports a new option, --teardown, which removes any pods and containers created by the given Kubernetes YAML.
  - The podman generate kube command now generates annotations for SELinux mount options on volume (:z and :Z) that are respected by the podman play kube command.
  - A new command has been added, podman pod logs, to return logs for all containers in a pod at the same time.
  - Two new commands have been added, podman volume export (to export a volume to a tar file) and podman volume import) (to populate a volume from a given tar file).
  - The podman auto-update command now supports simple rollbacks. If a container fails to start after an automatic update, it will be rolled back to the previous image and restarted again.
  - Pods now share their user namespace by default, and the podman pod create command now supports the --userns option. This allows rootless pods to be created with the --userns=keep-id option.
  - The podman pod ps command now supports a new filter with its --filter option, until, which returns pods created before a given timestamp.
  - The podman image scp command has been added. This command allows images to be transferred between different hosts.
  - The podman stats command supports a new option, --interval, to specify the amount of time before the information is refreshed.
  - The podman inspect command now includes ports exposed (but not published) by containers (e.g. ports from --expose when --publish-all is not specified).
  - The podman inspect command now has a new boolean value, Checkpointed, which indicates that a container was stopped as a result of a podman container checkpoint operation.
  - Volumes created by podman volume create now support setting quotas when run atop XFS. The size and inode options allow the maximum size and maximum number of inodes consumed by a volume to be limited.
  - The podman info command now outputs information on what log drivers, network drivers, and volume plugins are available for use (#11265).
  - The podman info command now outputs the current log driver in use, and the variant and codename of the distribution in use.
  - The parameters of the VM created by podman machine init (amount of disk space, memory, CPUs) can now be set in containers.conf.
  - The podman machine ls command now shows additional information (CPUs, memory, disk size) about VMs managed by podman machine.
  - The podman ps command now includes healthcheck status in container state for containers that have healthchecks (#11527).
  * Changes
  - The podman build command has a new alias, podman buildx, to improve compatibility with Docker. We have already added support for many docker buildx flags to podman build and aim to continue to do so.
  - Cases where Podman is run without a user session or a writable temporary files directory will now produce better error messages.
  - The default log driver has been changed from file to journald. The file driver did not properly support log rotation, so this should lead to a better experience. If journald is not available on the system, Podman will automatically revert to the file.
  - Podman no longer depends on ip for removing networks (#11403).
  - The deprecated --macvlan flag to podman network create now warns when it is used. It will be removed entirely in the Podman 4.0 release.
  - The podman machine start command now prints a message when the VM is successfully started.
  - The podman stats command can now be used on containers that are paused.
  - The podman unshare command will now return the exit code of the command that was run in the user namespace (assuming the command was successfully run).
  - Successful healthchecks will no longer add a healthy line to the system log to reduce log spam.
  - As a temporary workaround for a lack of shortname prompts in the Podman remote client, VMs created by podman machine now default to only using the docker.io registry.
  * Bugfixes
  - Fixed a bug where whitespace in the definition of sysctls (particularly default sysctls specified in containers.conf) would cause them to be parsed incorrectly.
  - Fixed a bug where the Windows remote client improperly validated volume paths (#10900).
  - Fixed a bug where the first line of logs from a container run with the journald log driver could be skipped.
  - Fixed a bug where images created by podman commit did not include ports exposed by the container.
  - Fixed a bug where the podman auto-update command would ignore the io.containers.autoupdate.authfile label when pulling images (#11171).
  - Fixed a bug where the --workdir option to podman create and podman run could not be set to a directory where a volume was mounted (#11352).
  - Fixed a bug where systemd socket-activation did not properly work with systemd-managed Podman containers (#10443).
  - Fixed a bug where environment variable secrets added to a container were not available to exec sessions launched in the container.
  - Fixed a bug where rootless containers could fail to start the rootlessport port-forwarding service when XDG_RUNTIME_DIR was set to a long path.
  - Fixed a bug where arguments to the --systemd option to podman create and podman run were case-sensitive (#11387).
  - Fixed a bug where the podman manifest rm command would also remove images referenced by the manifest, not just the manifest itself (#11344).
  - Fixed a bug where the Podman remote client on OS X would not function properly if the TMPDIR environment variable was not set (#11418).
  - Fixed a bug where the /etc/hosts file was not guaranteed to contain an entry for localhost (this is still not guaranteed if --net=host is used; such containers will exactly match the host's /etc/hosts) (#11411).
  - Fixed a bug where the podman machine start command could print warnings about unsupported CPU features (#11421).
  - Fixed a bug where the podman info command could segfault when accessing cgroup information.
  - Fixed a bug where the podman logs -f command could hang when a container exited (#11461).
  - Fixed a bug where the podman generate systemd command could not be used on containers that specified a restart policy (#11438).
  - Fixed a bug where the remote Podman client's podman build command would fail to build containers if the UID and GID on the client were higher than 65536 (#11474).
  - Fixed a bug where the remote Podman client's podman build command would fail to build containers if the context directory was a symlink (#11732).
  - Fixed a bug where the --network flag to podman play kube was not properly parsed when a non-bridge network configuration was specified.
  - Fixed a bug where the podman inspect command could error when the container being inspected was removed as it was being inspected (#11392).
  - Fixed a bug where the podman play kube command ignored the default pod infra image specified in containers.conf.
  - Fixed a bug where the --format option to podman inspect was nonfunctional under some circumstances (#8785).
  - Fixed a bug where the remote Podman client's podman run and podman exec commands could skip a byte of output every 8192 bytes (#11496).
  - Fixed a bug where the podman stats command would print nonsensical results if the container restarted while it was running (#11469).
  - Fixed a bug where the remote Podman client would error when STDOUT was redirected on a Windows client (#11444).
  - Fixed a bug where the podman run command could return 0 when the application in the container exited with 125 (#11540).
  - Fixed a bug where containers with --restart=always set using the rootlessport port-forwarding service could not be restarted automatically.
  - Fixed a bug where the --cgroups=split option to podman create and podman run was silently discarded if the container was part of a pod.
  - Fixed a bug where the podman container runlabel command could fail if the image name given included a tag.
  - Fixed a bug where Podman could add an extra 127.0.0.1 entry to /etc/hosts under some circumstances (#11596).
  - Fixed a bug where the remote Podman client's podman untag command did not properly handle tags including a digest (#11557).
  - Fixed a bug where the --format option to podman ps did not properly support the table argument for tabular output.
  - Fixed a bug where the --filter option to podman ps did not properly handle filtering by healthcheck status (#11687).
  - Fixed a bug where the podman run and podman start --attach commands could race when retrieving the exit code of a container that had already been removed resulting in an error (e.g. by an external podman rm -f) (#11633).
  - Fixed a bug where the podman generate kube command would add default environment variables to generated YAML.
  - Fixed a bug where the podman generate kube command would add the default CMD from the image to generated YAML (#11672).
  - Fixed a bug where the podman rm --storage command could fail to remove containers under some circumstances (#11207).
  - Fixed a bug where the podman machine ssh command could fail when run on Linux (#11731).
  - Fixed a bug where the podman stop command would error when used on a container that was already stopped (#11740).
  - Fixed a bug where renaming a container in a pod using the podman rename command, then removing the pod using podman pod rm, could cause Podman to believe the new name of the container was permanently in use, despite the container being removed (#11750).
  * API
  - The Libpod Pull endpoint for Images now has a new query parameter, quiet, which (when set to true) suppresses image pull progress reports (#10612).
  - The Compat Events endpoint now includes several deprecated fields from the Docker v1.21 API for improved compatibility with older clients.
  - The Compat List and Inspect endpoints for Images now prefix image IDs with sha256: for improved Docker compatibility (#11623).
  - The Compat Create endpoint for Containers now properly sets defaults for healthcheck-related fields (#11225).
  - The Compat Create endpoint for Containers now supports volume options provided by the Mounts field (#10831).
  - The Compat List endpoint for Secrets now supports a new query parameter, filter, which allows returned results to be filtered.
  - The Compat Auth endpoint now returns the correct response code (500 instead of 400) when logging into a registry fails.
  - The Version endpoint now includes information about the OCI runtime and Conmon in use (#11227).
  - Fixed a bug where the X-Registry-Config header was not properly handled, leading to errors when pulling images (#11235).
  - Fixed a bug where invalid query parameters could cause a null pointer dereference when creating error messages.
  - Logging of API requests and responses at trace level has been greatly improved, including the addition of an X-Reference-Id header to correlate requests and responses (#10053).
  * Misc
  - Updated Buildah to v1.23.0
  - Updated the containers/storage library to v1.36.0
  - Updated the containers/image library to v5.16.0
  - Updated the containers/common library to v0.44.0</changelog>
  <changelog author="michael@stroeder.com" date="1634731200">- Update to version 3.4.1:
  * Bugfixes
  - Fixed a bug where podman machine init could, under some circumstances,
    create invalid machine configurations which could not be started (#11824).
  - Fixed a bug where the podman machine list command would not properly
    populate some output fields.
  - Fixed a bug where podman machine rm could leave dangling sockets from
    the removed machine (#11393).
  - Fixed a bug where podman run --pids-limit=-1 was not supported (it now
    sets the PID limit in the container to unlimited) (#11782).
  - Fixed a bug where podman run and podman attach could throw errors about
    a closed network connection when STDIN was closed by the client (#11856).
  - Fixed a bug where the podman stop command could fail when run on a
    container that had another podman stop command run on it previously.
  - Fixed a bug where the --sync flag to podman ps was nonfunctional.
  - Fixed a bug where the Windows and OS X remote clients' podman stats
    command would fail (#11909).
  - Fixed a bug where the podman play kube command did not properly handle
    environment variables whose values contained an = (#11891).
  - Fixed a bug where the podman generate kube command could generate
    invalid annotations when run on containers with volumes that use SELinux
    relabelling (:z or :Z) (#11929).
  - Fixed a bug where the podman generate kube command would generate YAML
    including some unnecessary (set to default) fields (e.g. user and group,
    entrypoint, default protocol for forwarded ports) (#11914, #11915, and #11965).
  - Fixed a bug where the podman generate kube command could, under some
    circumstances, generate YAML including an invalid targetPort field for
    forwarded ports (#11930).
  - Fixed a bug where rootless Podman's podman info command could, under
    some circumstances, not read available CGroup controllers (#11931).
  - Fixed a bug where podman container checkpoint --export would fail to
    checkpoint any container created with --log-driver=none (#11974).
  * API
  - Fixed a bug where the Compat Create endpoint for Containers could panic
    when no options were passed to a bind mount of tmpfs (#11961).</changelog>
  <changelog author="michael@stroeder.com" date="1636804800">- Update to version 3.4.2:
  * Fixed a bug where podman tag could not tag manifest lists (#12046).
  * Fixed a bug where built-in volumes specified by images would not be
    created correctly under some circumstances.
  * Fixed a bug where, when using Podman Machine on OS X, containers in pods
    did not have working port forwarding from the host (#12207).
  * Fixed a bug where the podman network reload command command on containers
    using the slirp4netns network mode and the rootlessport port forwarding
    driver would make an unnecessary attempt to restart rootlessport
    on containers that did not forward ports.
  * Fixed a bug where the podman generate kube command would generate YAML
    including some unnecessary (set to default) fields (e.g. empty SELinux and
    DNS configuration blocks, and the privileged flag when set to false) (#11995).
  * Fixed a bug where the podman pod rm command could, if interrupted at the right moment,
    leave a reference to an already-removed infra container behind (#12034).
  * Fixed a bug where the podman pod rm command would not remove pods with
    more than one container if all containers save for the infra container
    were stopped unless --force was specified (#11713).
  * Fixed a bug where the --memory flag to podman run and podman create did
    not accept a limit of 0 (which should specify unlimited memory) (#12002).
  * Fixed a bug where the remote Podman client's podman build command could
    attempt to build a Dockerfile in the working directory of the podman
    system service instance instead of the Dockerfile specified by the user (#12054).
  * Fixed a bug where the podman logs --tail command could function improperly
    (printing more output than requested) when the journald log driver was used.
  * Fixed a bug where containers run using the slirp4netns network mode with
    IPv6 enabled would not have IPv6 connectivity until several seconds after they started (#11062).
  * Fixed a bug where some Podman commands could cause an extra dbus-daemon
    process to be created (#9727).
  * Fixed a bug where rootless Podman would sometimes print warnings
    about a failure to move the pause process into a given CGroup (#12065).
  * Fixed a bug where the checkpointed field in podman inspect on a container
    was not set to false after a container was restored.
  * Fixed a bug where the podman system service command would print
    overly-verbose logs about request IDs (#12181).
  * Fixed a bug where Podman could, when creating a new container without a name
    explicitly specified by the user, sometimes use an auto-generated name already
    in use by another container if multiple containers were being created in parallel (#11735).</changelog>
  <changelog author="michael@stroeder.com" date="1638878400">- Update to version 3.4.3:
  * Security
  - This release addresses CVE-2021-4024, where the podman machine command opened the gvproxy API (used to forward ports to podman machine VMs) to the public internet on port 7777.
  - This release addresses CVE-2021-41190, where incomplete specification of behavior regarding image manifests could lead to inconsistent decoding on different clients.
  * Features
  - The --secret type=mount option to podman create and podman run supports a new option, target=, which specifies where in the container the secret will be mounted (#12287).
  * Bugfixes
  - Fixed a bug where rootless Podman would occasionally print warning messages about failing to move the pause process to a new cgroup (#12065).
  - Fixed a bug where the podman run and podman create commands would, when pulling images, still require TLS even with registries set to Insecure via config file (#11933).
  - Fixed a bug where the podman generate systemd command generated units that depended on multi-user.target, which has been removed from some distributions (#12438).
  - Fixed a bug where Podman could not run containers with images that had /etc/ as a symlink (#12189).
  - Fixed a bug where the podman logs -f command would, when using the journald logs backend, exit immediately if the container had previously been restarted (#12263).
  - Fixed a bug where, in containers on VMs created by podman machine, the host.containers.internal name pointed to the VM, not the host system (#11642).
  - Fixed a bug where containers and pods created by the podman play kube command in VMs managed by podman machine would not automatically forward ports from the host machine (#12248).
  - Fixed a bug where podman machine init would fail on OS X when GNU Coreutils was installed (#12329).
  - Fixed a bug where podman machine start would exit before SSH on the started VM was accepting connections (#11532).
  - Fixed a bug where the podman run command with signal proxying (--sig-proxy) enabled could print an error if it attempted to send a signal to a container that had just exited (#8086).
  - Fixed a bug where the podman stats command would not return correct information for containers running Systemd as PID1 (#12400).
  - Fixed a bug where the podman image save command would fail on OS X when writing the image to STDOUT (#12402).
  - Fixed a bug where the podman ps command did not properly handle PS arguments which contained whitespace (#12452).
  - Fixed a bug where the podman-remote wait command could fail to detect that the container exited and return an error under some circumstances (#12457).
  - Fixed a bug where the Windows MSI installer for podman-remote would break the PATH environment variable by adding an extra " (#11416).
  * API
  - Updated the containers/image library to v5.17.0
  - The Libpod Play Kube endpoint now also accepts ConfigMap YAML as part of its payload, and will use provided any ConfigMap to configure provided pods and services.
  - Fixed a bug where the Compat Create endpoint for Containers would not always create the container's working directory if it did not exist (#11842).
  - Fixed a bug where the Compat Create endpoint for Containers returned an incorrect error message with 404 errors when the requested image was not found (#12315).
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle the HostConfig.Mounts field (#12419).
  - Fixed a bug where the Compat Archive endpoint for Containers did not properly report errors when the operation failed (#12420).
  - Fixed a bug where the Compat Build endpoint for Images ignored the layers query parameter (for caching intermediate layers from the build) (#12378).
  - Fixed a bug where the Compat Build endpoint for Images did not report errors in a manner compatible with Docker (#12392).
  - Fixed a bug where the Compat Build endpoint for Images would fail to build if the context directory was a symlink (#12409).
  - Fixed a bug where the Compat List endpoint for Images included manifest lists (and not just images) in returned results (#12453).
  * Misc
  - Podman now builds by default with cgo enabled on OS X, resolving some issues with SSH (#10737).</changelog>
  <changelog author="michael@stroeder.com" date="1638964800">- Update to version 3.4.4:
  * Bugfixes
  - Fixed a bug where the podman exec command would, under some circumstances,
    print a warning message about failing to move conmon to the appropriate cgroup (#12535).
  - Fixed a bug where named volumes created as part of container creation
    (e.g. podman run --volume avolume:/a/mountpoint or similar) would be
    mounted with incorrect permissions (#12523).
  - Fixed a bug where the podman-remote create and podman-remote run commands
    did not properly handle the --entrypoint="" option (to clear the container's entrypoint) (#12521).</changelog>
  <changelog author="dcermak@suse.com" date="1639051200">- Add: Provides: podman:/usr/bin/podman-remote subpackage for a clearer upgrade
  path from podman &lt; 3.1.2</changelog>
  <changelog author="bruno.leon@suse.com" date="1644494400">- fix CVE-2021-41190 [bsc#1193273], opencontainers: OCI manifest and index parsing confusion
- fix CVE-2021-4024  [bsc#1193166], podman machine spawns gvproxy with port binded to all IPs
- fix CVE-2021-20199 [bsc#1181640], Remote traffic to rootless containers is seen as orginating from localhost</changelog>
</package>
<package pkgid="22f3548a24f0817993f71e8e4c1cb27c879ffaf617750f4137227db8a3ae079c" name="podman-cni-config" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150300.9.3.2"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1629720000">- Revert crun change due to crun having exclusive arch targets
  that would drop podman support in PPC and IBM Z</changelog>
  <changelog author="michael@stroeder.com" date="1630411200">- Update to version 3.3.1:
  * Bugfixes
  - Fixed a bug where unit files created by podman generate systemd could
    not cleanup shut down containers when stopped by systemctl stop (#11304).
  - Fixed a bug where podman machine commands would not properly locate
    the gvproxy binary in some circumstances.
  - Fixed a bug where containers created as part of a pod using the
  - -pod-id-file option would not join the pod's network namespace (#11303).
  - Fixed a bug where Podman, when using the systemd cgroups driver,
    could sometimes leak dbus sessions.
  - Fixed a bug where the until filter to podman logs and podman events
    was improperly handled, requiring input to be negated (#11158).
  - Fixed a bug where rootless containers using CNI networking run on
    systems using systemd-resolved for DNS would fail to start if resolved
    symlinked /etc/resolv.conf to an absolute path (#11358).
  * API
  - A large number of potential file descriptor leaks from improperly closing
    client connections have been fixed.</changelog>
  <changelog author="michael@stroeder.com" date="1630584000">- require runc &gt;= 1.0.1</changelog>
  <changelog author="michael@stroeder.com" date="1633089600">- Update to version 3.4.0:
  * Features
  - Pods now support init containers! Init containers are containers which run before the rest of the pod starts. There are two types of init containers: "always", which always run before the pod is started, and "once", which only run the first time the pod starts and are subsequently removed. They can be added using the podman create command's --init-ctr option.
  - Support for init containers has also been added to podman play kube and podman generate kube - init containers contained in Kubernetes YAML will be created as Podman init containers, and YAML generated by Podman will include any init containers created.
  - The podman play kube command now supports building images. If the --build option is given and a directory with the name of the specified image exists in the current working directory and contains a valid Containerfile or Dockerfile, the image will be built and used for the container.
  - The podman play kube command now supports a new option, --teardown, which removes any pods and containers created by the given Kubernetes YAML.
  - The podman generate kube command now generates annotations for SELinux mount options on volume (:z and :Z) that are respected by the podman play kube command.
  - A new command has been added, podman pod logs, to return logs for all containers in a pod at the same time.
  - Two new commands have been added, podman volume export (to export a volume to a tar file) and podman volume import) (to populate a volume from a given tar file).
  - The podman auto-update command now supports simple rollbacks. If a container fails to start after an automatic update, it will be rolled back to the previous image and restarted again.
  - Pods now share their user namespace by default, and the podman pod create command now supports the --userns option. This allows rootless pods to be created with the --userns=keep-id option.
  - The podman pod ps command now supports a new filter with its --filter option, until, which returns pods created before a given timestamp.
  - The podman image scp command has been added. This command allows images to be transferred between different hosts.
  - The podman stats command supports a new option, --interval, to specify the amount of time before the information is refreshed.
  - The podman inspect command now includes ports exposed (but not published) by containers (e.g. ports from --expose when --publish-all is not specified).
  - The podman inspect command now has a new boolean value, Checkpointed, which indicates that a container was stopped as a result of a podman container checkpoint operation.
  - Volumes created by podman volume create now support setting quotas when run atop XFS. The size and inode options allow the maximum size and maximum number of inodes consumed by a volume to be limited.
  - The podman info command now outputs information on what log drivers, network drivers, and volume plugins are available for use (#11265).
  - The podman info command now outputs the current log driver in use, and the variant and codename of the distribution in use.
  - The parameters of the VM created by podman machine init (amount of disk space, memory, CPUs) can now be set in containers.conf.
  - The podman machine ls command now shows additional information (CPUs, memory, disk size) about VMs managed by podman machine.
  - The podman ps command now includes healthcheck status in container state for containers that have healthchecks (#11527).
  * Changes
  - The podman build command has a new alias, podman buildx, to improve compatibility with Docker. We have already added support for many docker buildx flags to podman build and aim to continue to do so.
  - Cases where Podman is run without a user session or a writable temporary files directory will now produce better error messages.
  - The default log driver has been changed from file to journald. The file driver did not properly support log rotation, so this should lead to a better experience. If journald is not available on the system, Podman will automatically revert to the file.
  - Podman no longer depends on ip for removing networks (#11403).
  - The deprecated --macvlan flag to podman network create now warns when it is used. It will be removed entirely in the Podman 4.0 release.
  - The podman machine start command now prints a message when the VM is successfully started.
  - The podman stats command can now be used on containers that are paused.
  - The podman unshare command will now return the exit code of the command that was run in the user namespace (assuming the command was successfully run).
  - Successful healthchecks will no longer add a healthy line to the system log to reduce log spam.
  - As a temporary workaround for a lack of shortname prompts in the Podman remote client, VMs created by podman machine now default to only using the docker.io registry.
  * Bugfixes
  - Fixed a bug where whitespace in the definition of sysctls (particularly default sysctls specified in containers.conf) would cause them to be parsed incorrectly.
  - Fixed a bug where the Windows remote client improperly validated volume paths (#10900).
  - Fixed a bug where the first line of logs from a container run with the journald log driver could be skipped.
  - Fixed a bug where images created by podman commit did not include ports exposed by the container.
  - Fixed a bug where the podman auto-update command would ignore the io.containers.autoupdate.authfile label when pulling images (#11171).
  - Fixed a bug where the --workdir option to podman create and podman run could not be set to a directory where a volume was mounted (#11352).
  - Fixed a bug where systemd socket-activation did not properly work with systemd-managed Podman containers (#10443).
  - Fixed a bug where environment variable secrets added to a container were not available to exec sessions launched in the container.
  - Fixed a bug where rootless containers could fail to start the rootlessport port-forwarding service when XDG_RUNTIME_DIR was set to a long path.
  - Fixed a bug where arguments to the --systemd option to podman create and podman run were case-sensitive (#11387).
  - Fixed a bug where the podman manifest rm command would also remove images referenced by the manifest, not just the manifest itself (#11344).
  - Fixed a bug where the Podman remote client on OS X would not function properly if the TMPDIR environment variable was not set (#11418).
  - Fixed a bug where the /etc/hosts file was not guaranteed to contain an entry for localhost (this is still not guaranteed if --net=host is used; such containers will exactly match the host's /etc/hosts) (#11411).
  - Fixed a bug where the podman machine start command could print warnings about unsupported CPU features (#11421).
  - Fixed a bug where the podman info command could segfault when accessing cgroup information.
  - Fixed a bug where the podman logs -f command could hang when a container exited (#11461).
  - Fixed a bug where the podman generate systemd command could not be used on containers that specified a restart policy (#11438).
  - Fixed a bug where the remote Podman client's podman build command would fail to build containers if the UID and GID on the client were higher than 65536 (#11474).
  - Fixed a bug where the remote Podman client's podman build command would fail to build containers if the context directory was a symlink (#11732).
  - Fixed a bug where the --network flag to podman play kube was not properly parsed when a non-bridge network configuration was specified.
  - Fixed a bug where the podman inspect command could error when the container being inspected was removed as it was being inspected (#11392).
  - Fixed a bug where the podman play kube command ignored the default pod infra image specified in containers.conf.
  - Fixed a bug where the --format option to podman inspect was nonfunctional under some circumstances (#8785).
  - Fixed a bug where the remote Podman client's podman run and podman exec commands could skip a byte of output every 8192 bytes (#11496).
  - Fixed a bug where the podman stats command would print nonsensical results if the container restarted while it was running (#11469).
  - Fixed a bug where the remote Podman client would error when STDOUT was redirected on a Windows client (#11444).
  - Fixed a bug where the podman run command could return 0 when the application in the container exited with 125 (#11540).
  - Fixed a bug where containers with --restart=always set using the rootlessport port-forwarding service could not be restarted automatically.
  - Fixed a bug where the --cgroups=split option to podman create and podman run was silently discarded if the container was part of a pod.
  - Fixed a bug where the podman container runlabel command could fail if the image name given included a tag.
  - Fixed a bug where Podman could add an extra 127.0.0.1 entry to /etc/hosts under some circumstances (#11596).
  - Fixed a bug where the remote Podman client's podman untag command did not properly handle tags including a digest (#11557).
  - Fixed a bug where the --format option to podman ps did not properly support the table argument for tabular output.
  - Fixed a bug where the --filter option to podman ps did not properly handle filtering by healthcheck status (#11687).
  - Fixed a bug where the podman run and podman start --attach commands could race when retrieving the exit code of a container that had already been removed resulting in an error (e.g. by an external podman rm -f) (#11633).
  - Fixed a bug where the podman generate kube command would add default environment variables to generated YAML.
  - Fixed a bug where the podman generate kube command would add the default CMD from the image to generated YAML (#11672).
  - Fixed a bug where the podman rm --storage command could fail to remove containers under some circumstances (#11207).
  - Fixed a bug where the podman machine ssh command could fail when run on Linux (#11731).
  - Fixed a bug where the podman stop command would error when used on a container that was already stopped (#11740).
  - Fixed a bug where renaming a container in a pod using the podman rename command, then removing the pod using podman pod rm, could cause Podman to believe the new name of the container was permanently in use, despite the container being removed (#11750).
  * API
  - The Libpod Pull endpoint for Images now has a new query parameter, quiet, which (when set to true) suppresses image pull progress reports (#10612).
  - The Compat Events endpoint now includes several deprecated fields from the Docker v1.21 API for improved compatibility with older clients.
  - The Compat List and Inspect endpoints for Images now prefix image IDs with sha256: for improved Docker compatibility (#11623).
  - The Compat Create endpoint for Containers now properly sets defaults for healthcheck-related fields (#11225).
  - The Compat Create endpoint for Containers now supports volume options provided by the Mounts field (#10831).
  - The Compat List endpoint for Secrets now supports a new query parameter, filter, which allows returned results to be filtered.
  - The Compat Auth endpoint now returns the correct response code (500 instead of 400) when logging into a registry fails.
  - The Version endpoint now includes information about the OCI runtime and Conmon in use (#11227).
  - Fixed a bug where the X-Registry-Config header was not properly handled, leading to errors when pulling images (#11235).
  - Fixed a bug where invalid query parameters could cause a null pointer dereference when creating error messages.
  - Logging of API requests and responses at trace level has been greatly improved, including the addition of an X-Reference-Id header to correlate requests and responses (#10053).
  * Misc
  - Updated Buildah to v1.23.0
  - Updated the containers/storage library to v1.36.0
  - Updated the containers/image library to v5.16.0
  - Updated the containers/common library to v0.44.0</changelog>
  <changelog author="michael@stroeder.com" date="1634731200">- Update to version 3.4.1:
  * Bugfixes
  - Fixed a bug where podman machine init could, under some circumstances,
    create invalid machine configurations which could not be started (#11824).
  - Fixed a bug where the podman machine list command would not properly
    populate some output fields.
  - Fixed a bug where podman machine rm could leave dangling sockets from
    the removed machine (#11393).
  - Fixed a bug where podman run --pids-limit=-1 was not supported (it now
    sets the PID limit in the container to unlimited) (#11782).
  - Fixed a bug where podman run and podman attach could throw errors about
    a closed network connection when STDIN was closed by the client (#11856).
  - Fixed a bug where the podman stop command could fail when run on a
    container that had another podman stop command run on it previously.
  - Fixed a bug where the --sync flag to podman ps was nonfunctional.
  - Fixed a bug where the Windows and OS X remote clients' podman stats
    command would fail (#11909).
  - Fixed a bug where the podman play kube command did not properly handle
    environment variables whose values contained an = (#11891).
  - Fixed a bug where the podman generate kube command could generate
    invalid annotations when run on containers with volumes that use SELinux
    relabelling (:z or :Z) (#11929).
  - Fixed a bug where the podman generate kube command would generate YAML
    including some unnecessary (set to default) fields (e.g. user and group,
    entrypoint, default protocol for forwarded ports) (#11914, #11915, and #11965).
  - Fixed a bug where the podman generate kube command could, under some
    circumstances, generate YAML including an invalid targetPort field for
    forwarded ports (#11930).
  - Fixed a bug where rootless Podman's podman info command could, under
    some circumstances, not read available CGroup controllers (#11931).
  - Fixed a bug where podman container checkpoint --export would fail to
    checkpoint any container created with --log-driver=none (#11974).
  * API
  - Fixed a bug where the Compat Create endpoint for Containers could panic
    when no options were passed to a bind mount of tmpfs (#11961).</changelog>
  <changelog author="michael@stroeder.com" date="1636804800">- Update to version 3.4.2:
  * Fixed a bug where podman tag could not tag manifest lists (#12046).
  * Fixed a bug where built-in volumes specified by images would not be
    created correctly under some circumstances.
  * Fixed a bug where, when using Podman Machine on OS X, containers in pods
    did not have working port forwarding from the host (#12207).
  * Fixed a bug where the podman network reload command command on containers
    using the slirp4netns network mode and the rootlessport port forwarding
    driver would make an unnecessary attempt to restart rootlessport
    on containers that did not forward ports.
  * Fixed a bug where the podman generate kube command would generate YAML
    including some unnecessary (set to default) fields (e.g. empty SELinux and
    DNS configuration blocks, and the privileged flag when set to false) (#11995).
  * Fixed a bug where the podman pod rm command could, if interrupted at the right moment,
    leave a reference to an already-removed infra container behind (#12034).
  * Fixed a bug where the podman pod rm command would not remove pods with
    more than one container if all containers save for the infra container
    were stopped unless --force was specified (#11713).
  * Fixed a bug where the --memory flag to podman run and podman create did
    not accept a limit of 0 (which should specify unlimited memory) (#12002).
  * Fixed a bug where the remote Podman client's podman build command could
    attempt to build a Dockerfile in the working directory of the podman
    system service instance instead of the Dockerfile specified by the user (#12054).
  * Fixed a bug where the podman logs --tail command could function improperly
    (printing more output than requested) when the journald log driver was used.
  * Fixed a bug where containers run using the slirp4netns network mode with
    IPv6 enabled would not have IPv6 connectivity until several seconds after they started (#11062).
  * Fixed a bug where some Podman commands could cause an extra dbus-daemon
    process to be created (#9727).
  * Fixed a bug where rootless Podman would sometimes print warnings
    about a failure to move the pause process into a given CGroup (#12065).
  * Fixed a bug where the checkpointed field in podman inspect on a container
    was not set to false after a container was restored.
  * Fixed a bug where the podman system service command would print
    overly-verbose logs about request IDs (#12181).
  * Fixed a bug where Podman could, when creating a new container without a name
    explicitly specified by the user, sometimes use an auto-generated name already
    in use by another container if multiple containers were being created in parallel (#11735).</changelog>
  <changelog author="michael@stroeder.com" date="1638878400">- Update to version 3.4.3:
  * Security
  - This release addresses CVE-2021-4024, where the podman machine command opened the gvproxy API (used to forward ports to podman machine VMs) to the public internet on port 7777.
  - This release addresses CVE-2021-41190, where incomplete specification of behavior regarding image manifests could lead to inconsistent decoding on different clients.
  * Features
  - The --secret type=mount option to podman create and podman run supports a new option, target=, which specifies where in the container the secret will be mounted (#12287).
  * Bugfixes
  - Fixed a bug where rootless Podman would occasionally print warning messages about failing to move the pause process to a new cgroup (#12065).
  - Fixed a bug where the podman run and podman create commands would, when pulling images, still require TLS even with registries set to Insecure via config file (#11933).
  - Fixed a bug where the podman generate systemd command generated units that depended on multi-user.target, which has been removed from some distributions (#12438).
  - Fixed a bug where Podman could not run containers with images that had /etc/ as a symlink (#12189).
  - Fixed a bug where the podman logs -f command would, when using the journald logs backend, exit immediately if the container had previously been restarted (#12263).
  - Fixed a bug where, in containers on VMs created by podman machine, the host.containers.internal name pointed to the VM, not the host system (#11642).
  - Fixed a bug where containers and pods created by the podman play kube command in VMs managed by podman machine would not automatically forward ports from the host machine (#12248).
  - Fixed a bug where podman machine init would fail on OS X when GNU Coreutils was installed (#12329).
  - Fixed a bug where podman machine start would exit before SSH on the started VM was accepting connections (#11532).
  - Fixed a bug where the podman run command with signal proxying (--sig-proxy) enabled could print an error if it attempted to send a signal to a container that had just exited (#8086).
  - Fixed a bug where the podman stats command would not return correct information for containers running Systemd as PID1 (#12400).
  - Fixed a bug where the podman image save command would fail on OS X when writing the image to STDOUT (#12402).
  - Fixed a bug where the podman ps command did not properly handle PS arguments which contained whitespace (#12452).
  - Fixed a bug where the podman-remote wait command could fail to detect that the container exited and return an error under some circumstances (#12457).
  - Fixed a bug where the Windows MSI installer for podman-remote would break the PATH environment variable by adding an extra " (#11416).
  * API
  - Updated the containers/image library to v5.17.0
  - The Libpod Play Kube endpoint now also accepts ConfigMap YAML as part of its payload, and will use provided any ConfigMap to configure provided pods and services.
  - Fixed a bug where the Compat Create endpoint for Containers would not always create the container's working directory if it did not exist (#11842).
  - Fixed a bug where the Compat Create endpoint for Containers returned an incorrect error message with 404 errors when the requested image was not found (#12315).
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle the HostConfig.Mounts field (#12419).
  - Fixed a bug where the Compat Archive endpoint for Containers did not properly report errors when the operation failed (#12420).
  - Fixed a bug where the Compat Build endpoint for Images ignored the layers query parameter (for caching intermediate layers from the build) (#12378).
  - Fixed a bug where the Compat Build endpoint for Images did not report errors in a manner compatible with Docker (#12392).
  - Fixed a bug where the Compat Build endpoint for Images would fail to build if the context directory was a symlink (#12409).
  - Fixed a bug where the Compat List endpoint for Images included manifest lists (and not just images) in returned results (#12453).
  * Misc
  - Podman now builds by default with cgo enabled on OS X, resolving some issues with SSH (#10737).</changelog>
  <changelog author="michael@stroeder.com" date="1638964800">- Update to version 3.4.4:
  * Bugfixes
  - Fixed a bug where the podman exec command would, under some circumstances,
    print a warning message about failing to move conmon to the appropriate cgroup (#12535).
  - Fixed a bug where named volumes created as part of container creation
    (e.g. podman run --volume avolume:/a/mountpoint or similar) would be
    mounted with incorrect permissions (#12523).
  - Fixed a bug where the podman-remote create and podman-remote run commands
    did not properly handle the --entrypoint="" option (to clear the container's entrypoint) (#12521).</changelog>
  <changelog author="dcermak@suse.com" date="1639051200">- Add: Provides: podman:/usr/bin/podman-remote subpackage for a clearer upgrade
  path from podman &lt; 3.1.2</changelog>
  <changelog author="bruno.leon@suse.com" date="1644494400">- fix CVE-2021-41190 [bsc#1193273], opencontainers: OCI manifest and index parsing confusion
- fix CVE-2021-4024  [bsc#1193166], podman machine spawns gvproxy with port binded to all IPs
- fix CVE-2021-20199 [bsc#1181640], Remote traffic to rootless containers is seen as orginating from localhost</changelog>
</package>
<package pkgid="b5a615911765c8a6ae4261ee68814dc7a8cfffaff88b70108afb0479d21dd9e6" name="policycoreutils" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.4.2"/>
  <changelog author="jsegitz@suse.de" date="1582804800">- Ship working pam config for newrole (bsc#1163020)
- Recommend policycoreutils-devel to have perm_map file available</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * fixfiles: Fix "verify" option
  * fixfiles: Fix [-B] [-F] onboot
  * fixfiles: Force full relabel when SELinux is disabled
  * semodule: Enable CIL logging
  * semanage: Add support for DCCP and SCTP protocols
  * semanage: Do not use default s0 range in "semanage login -a"
  * semanage: Document DCCP and SCTP support
  * semanage: Improve handling of "permissive" statements
  * semanage: fix moduleRecords.customized()
  Refreshed chcat_join.patch</changelog>
  <changelog author="jsegitz@suse.de" date="1583755200">- Dropped Recommends: for %{name}-lang and %{name}-devel. Not
  allowed by openSUSE guidelines</changelog>
  <changelog author="jsegitz@suse.de" date="1590753600">- Move pp binary to libexec directory instead of lib</changelog>
  <changelog author="dimstar@opensuse.org" date="1591272000">- Pass the right value for LIBEXECDIR to make / make install
  instead of trying to move the file around post install. This
  caters for the planned change of libexecdir to change from
  /usr/lib to /usr/libexec by injecting the right value no matter
  what.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * New `setfiles -E` option - treat conflicting specifications as errors, such
    as where two hardlinks for the same inode have different contexts.
  * `setsebool -V` reports errors from commit phase
  * matchpathcon related interfaces are deprecated
  * New `restorecon -x` option which prevents it from crossing file system
  * boundaries.
  * `sepolgen-ifgen` parses a gen_tunable statement as bool
  * Removed Requires for python3-ipy as the ipaddress module is used. No
    requires for python-ipaddress as it's assumed this is used only on recent
    systems
  * Drop chcat_join.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1594987200">- Proper default permissions for newrole (4755)</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Align more with Fedora spec file to get rid of python dependencies
  in the core system
  - create new python-utils sub-package
  - move some tools to devel sub-package
- Cleanup dependencies</changelog>
  <changelog author="jsegitz@suse.com" date="1599739200">- Add get_os_version.patch
  get_os_version is implemented in a very RH/Fedora specific way.
  Ensure that it returns a valid string for SUSE by changing the
  default. Also remove the RH specific logic when generating HTML
  versions of the SELinux documentation</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Add run_init.pamd.patch to adjust to SUSE pam setup. Removed
  run_init_use_pam_keyinit.patch and included it in the new patch
  (bsc#1190098)</changelog>
</package>
<package pkgid="fdcaeeddd3a6d87314b9d13c4fcc9557f28ceeb6f71d52da2bb5c0da8cb57e86" name="policycoreutils-devel" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.4.2"/>
  <changelog author="jsegitz@suse.de" date="1582804800">- Ship working pam config for newrole (bsc#1163020)
- Recommend policycoreutils-devel to have perm_map file available</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * fixfiles: Fix "verify" option
  * fixfiles: Fix [-B] [-F] onboot
  * fixfiles: Force full relabel when SELinux is disabled
  * semodule: Enable CIL logging
  * semanage: Add support for DCCP and SCTP protocols
  * semanage: Do not use default s0 range in "semanage login -a"
  * semanage: Document DCCP and SCTP support
  * semanage: Improve handling of "permissive" statements
  * semanage: fix moduleRecords.customized()
  Refreshed chcat_join.patch</changelog>
  <changelog author="jsegitz@suse.de" date="1583755200">- Dropped Recommends: for %{name}-lang and %{name}-devel. Not
  allowed by openSUSE guidelines</changelog>
  <changelog author="jsegitz@suse.de" date="1590753600">- Move pp binary to libexec directory instead of lib</changelog>
  <changelog author="dimstar@opensuse.org" date="1591272000">- Pass the right value for LIBEXECDIR to make / make install
  instead of trying to move the file around post install. This
  caters for the planned change of libexecdir to change from
  /usr/lib to /usr/libexec by injecting the right value no matter
  what.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * New `setfiles -E` option - treat conflicting specifications as errors, such
    as where two hardlinks for the same inode have different contexts.
  * `setsebool -V` reports errors from commit phase
  * matchpathcon related interfaces are deprecated
  * New `restorecon -x` option which prevents it from crossing file system
  * boundaries.
  * `sepolgen-ifgen` parses a gen_tunable statement as bool
  * Removed Requires for python3-ipy as the ipaddress module is used. No
    requires for python-ipaddress as it's assumed this is used only on recent
    systems
  * Drop chcat_join.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1594987200">- Proper default permissions for newrole (4755)</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Align more with Fedora spec file to get rid of python dependencies
  in the core system
  - create new python-utils sub-package
  - move some tools to devel sub-package
- Cleanup dependencies</changelog>
  <changelog author="jsegitz@suse.com" date="1599739200">- Add get_os_version.patch
  get_os_version is implemented in a very RH/Fedora specific way.
  Ensure that it returns a valid string for SUSE by changing the
  default. Also remove the RH specific logic when generating HTML
  versions of the SELinux documentation</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Add run_init.pamd.patch to adjust to SUSE pam setup. Removed
  run_init_use_pam_keyinit.patch and included it in the new patch
  (bsc#1190098)</changelog>
</package>
<package pkgid="d8a247c96fc7c110768584a9a5902806a9c8df17a3c1dbb6366e495bc6cb88d1" name="policycoreutils-python-utils" arch="noarch">
  <version epoch="0" ver="3.1" rel="150300.4.2"/>
  <changelog author="jsegitz@suse.de" date="1582804800">- Ship working pam config for newrole (bsc#1163020)
- Recommend policycoreutils-devel to have perm_map file available</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * fixfiles: Fix "verify" option
  * fixfiles: Fix [-B] [-F] onboot
  * fixfiles: Force full relabel when SELinux is disabled
  * semodule: Enable CIL logging
  * semanage: Add support for DCCP and SCTP protocols
  * semanage: Do not use default s0 range in "semanage login -a"
  * semanage: Document DCCP and SCTP support
  * semanage: Improve handling of "permissive" statements
  * semanage: fix moduleRecords.customized()
  Refreshed chcat_join.patch</changelog>
  <changelog author="jsegitz@suse.de" date="1583755200">- Dropped Recommends: for %{name}-lang and %{name}-devel. Not
  allowed by openSUSE guidelines</changelog>
  <changelog author="jsegitz@suse.de" date="1590753600">- Move pp binary to libexec directory instead of lib</changelog>
  <changelog author="dimstar@opensuse.org" date="1591272000">- Pass the right value for LIBEXECDIR to make / make install
  instead of trying to move the file around post install. This
  caters for the planned change of libexecdir to change from
  /usr/lib to /usr/libexec by injecting the right value no matter
  what.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * New `setfiles -E` option - treat conflicting specifications as errors, such
    as where two hardlinks for the same inode have different contexts.
  * `setsebool -V` reports errors from commit phase
  * matchpathcon related interfaces are deprecated
  * New `restorecon -x` option which prevents it from crossing file system
  * boundaries.
  * `sepolgen-ifgen` parses a gen_tunable statement as bool
  * Removed Requires for python3-ipy as the ipaddress module is used. No
    requires for python-ipaddress as it's assumed this is used only on recent
    systems
  * Drop chcat_join.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1594987200">- Proper default permissions for newrole (4755)</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Align more with Fedora spec file to get rid of python dependencies
  in the core system
  - create new python-utils sub-package
  - move some tools to devel sub-package
- Cleanup dependencies</changelog>
  <changelog author="jsegitz@suse.com" date="1599739200">- Add get_os_version.patch
  get_os_version is implemented in a very RH/Fedora specific way.
  Ensure that it returns a valid string for SUSE by changing the
  default. Also remove the RH specific logic when generating HTML
  versions of the SELinux documentation</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Add run_init.pamd.patch to adjust to SUSE pam setup. Removed
  run_init_use_pam_keyinit.patch and included it in the new patch
  (bsc#1190098)</changelog>
</package>
<package pkgid="4dfd09b831cfa804d8214c8b027ae4e27c26c44572f7f861b4ac453fccad8a1f" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
</package>
<package pkgid="377108e8710fe12eaa25148a39dbcf9b16d6b57722f9b07b6ae205540138ff2e" name="procmail" arch="x86_64">
  <version epoch="0" ver="3.22" rel="2.34"/>
  <changelog author="seife+obs@b1-systems.com" date="1297166400">- the only thing that needs mimencode are the examples
  change the "Requires: mimencode" to "Recommends"</changelog>
  <changelog author="werner@suse.de" date="1321272000">- Go forward and add the patches from Debian
- Also add ipv6 patch from openmamba
- Adop or drop our own patches
- Do not sleep a second on NFS based home shares
- Support LMTP (rfc2033: Local Mail Transfer Protocol) server</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls
- Add GPG verification</changelog>
  <changelog author="werner@suse.de" date="1409832000">- Add patch procmail-3.22-CVE-2014-3618.patch to fix heap-overflow
  in procmail's formail utility when processing specially-crafted
  email headers (bnc#894999, CVE-2014-3618)</changelog>
  <changelog author="werner@suse.de" date="1409832001">- Correct licenses
- Add cflags() shell function to be able to check for compiler,
  linker, and assembler flags, that is if those are supported by
  the compiler, linker, or assembler.</changelog>
  <changelog author="dimstar@opensuse.org" date="1419249600">- Drop .keyring and .sig files: procmail is signed using an MD5
  type key, which is no longer accepted by GPG 2.1
- Drop the usage of gpg-offline: we don't have keys to verify and
  the source validator performs the action transparent nowadays.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to have binaries independent of speed
  of compile system (boo#1041534)</changelog>
  <changelog author="werner@suse.de" date="1510920000">- Add patch procmail-formisc.c.patch to fix bug bsc#1068648
  CVE-2017-16844</changelog>
</package>
<package pkgid="267f72e2e31b5a066bef57aadbb83f079108d86e9206015ab77b82f1fca08ef2" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="7.22.1"/>
  <changelog author="jengelh@inai.de" date="1522929600">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
</package>
<package pkgid="529153814b3422619a6a5d0ff599e0328474dcdc88eaa16bf0279284890c1627" name="psmisc" arch="x86_64">
  <version epoch="0" ver="23.0" rel="6.19.1"/>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
</package>
<package pkgid="8fccc2c39e197d468d1ab56c7831b3fa09418fa8b0fb4a029823dac85c49b177" name="pv" arch="x86_64">
  <version epoch="0" ver="1.6.6" rel="3.4.1"/>
  <changelog author="jengelh@inai.de" date="1346500800">- Update to new upstream release 1.3.4
  * new --disable-splice configure script option
  * fixed line mode size count with multiple files
- Use RH-friendly make install</changelog>
  <changelog author="jengelh@inai.de" date="1353412800">- Update to new upstream release 1.3.9
  * new --pidfile option to save process ID to a file
  * integrated patch for --numeric with --timer and --bytes
  * removed signalling from --remote to prevent accidental process kills
  * new --format option and allow --format parameters to be sent
  with --remote</changelog>
  <changelog author="jengelh@inai.de" date="1356350400">- Update to new upstream release 1.4.4
  * fix crash when progress is displayed with too-small terminal
  * new option --skip-errors
  * new option --stop-at-size to stop after --size bytes
  * autodetermine size if stdout is a block device
  * fix a use-after-free bug</changelog>
  <changelog author="jengelh@inai.de" date="1359115200">- Update to new upstream release 1.4.6
  * updated manual page to show known problem with "-R" on Cygwin
  * added patch from Pawel Piatek to omit O_NOFOLLOW in AIX</changelog>
  <changelog author="jengelh@inai.de" date="1370433600">- Add explicit BuildRequires for usleep</changelog>
  <changelog author="jengelh@inai.de" date="1376308800">- Update to new upstream release 1.4.12
  * A fix for splice() not using stdin was implemented
  * A new -0/--null option has been added to count NUL-terminated
  "lines"</changelog>
  <changelog author="jengelh@inai.de" date="1399291200">- Update to new upstream release 1.5.3
  * Added new display options --buffer-percent, --last-written
  * New transfer option --no-splice
  * New option --watchfd to monitor file descriptor status of another
  process, rather than moving data from stdin to stdout.</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Update to new upstream release 1.5.7
  * show KiB instead of incorrect kiB
  * work around awk bug in tests/016-numeric-timer in decimal ","
  locales</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.6.0
  * new option "-D" / "--delay-start" to only show bar after
  N seconds
  * new option "--fineta" / "-I" to show ETA as time of day rather
  than time remaining
  * change ETA (--eta / -e) so that days are given if the hours
  remaining are 24 or more
  * repeat read and write attempts on partial buffer fill/empty to
  work around post-signal transfer rate drop
  * output errors on a new line to avoid overwriting transfer bar</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 1.6.6
  * Fix target buffer size (-B) being ignored
  * Cap read/write sizes, and check elapsed time during read/write
    cycle to avoid display hangs with large buffers or slow media.
  * Report error in "-d" if process fd directory is unreadable, or
    if process disappears before we start the main loop.</changelog>
</package>
<package pkgid="76ce3c4ceb31c3bea0ced534c1361a571265773c7ecd2cff9b43d5371bc78ed9" name="python-azure-agent" arch="noarch">
  <version epoch="0" ver="2.2.49.2" rel="3.20.1"/>
  <changelog author="rjschwei@suse.com" date="1551960000">- Add paa_cve_2019-0804.patch (bsc#1127838)
  - An issue with swapfile handling in the agent creates a data leak situation
    that exposes system memory data.</changelog>
  <changelog author="rjschwei@suse.com" date="1575547200">- Update to version 2.2.45 (jsc#ECO-80)
  + Remove paa_cve_2019-0804.patch, included upstream
  + Add support for Gen2 VM resource disks
  + Use alternate systemd detection
  + Fix /proc/net/route requirement that causes errors on FreeBSD
  + Add cloud-init auto-detect to prevent multiple provisioning mechanisms
    from relying on configuration for coordination
  + Disable cgroups when daemon is setup incorrectly
  + Remove upgrade extension loop for the same goal state
  + Add container id for extension telemetry events
  + Be more exact when detecting IMDS service health
  + Changing add_event to start sending missing fields
- From 2.2.44
  + Remove outdated extension ZIP packages
  + Improved error handling when starting extensions using systemd
  + Reduce provisioning time of some custom images
  + Improve the handling of extension download errors
  + New API for extension authors to handle errors during extension update
  + Fix handling of errors in calls to openssl
  + Improve logic to determine current distro
  + Reduce verbosity of several logging statements
- From 2.2.42
  + Poll for artifact blob, addresses goal state procesing issue
- From 2.2.41
  + Rewriting the mechanism to start the extension using systemd-run for
    systems using systemd for managing
  + Refactoring of resource monitoring framework using cgroup for both
    systemd and non-systemd approaches [#1530, #1534]
  + Telemetry pipeline for resource monitoring data
- From 2.2.40
  + Fixed tracking of memory/cpu usage
  + Do not prevent extensions from running if setting up cgroups fails
  + Enable systemd-aware deprovisioning on all versions &gt;= 18.04
  + Add systemd support for Debian Jessie, Stretch, and Buster
  + Support for Linux Openwrt
- From 2.2.38
  + Fix CVE-2019-0804
  + Add fixes for handling swap file and other nit fixes
- From 2.2.37
  + Improves re-try logic to handle errors while downloading extensions</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1585051200">- Add paa_use_hostnamectl.patch (bsc#1167601, bsc#1167602)
  + Set the hostname using hostnamectl to ensure setting is
    properly applied</changelog>
  <changelog author="rjschwei@suse.com" date="1594987200">- Add proper_dhcp_config_set.patch (bsc#1173866)
  + Properly set the dhcp configuration to push the hostname to the DHCP
    server
  + Do not bring the interface down to push the hostname, just use ifup</changelog>
  <changelog author="rjschwei@suse.com" date="1597406400">- Drop paa_sudo_sle15_nopwd.patch (bsc#1175198)
  + sudoers file is managed by cloud-init we no longer need this hack</changelog>
  <changelog author="rjschwei@suse.com" date="1599739200">- Update to version 2.2.49.2 (bsc#1176368, bsc#1176369)
  + Remove paa_use_hostnamectl.patch included upstream
  + Forwrad port proper_dhcp_config_set.patch
  + Do not use --unit with systemd-cgls (#1910)
  + Report processes that do not belong to the agent's cgroup (#1908)
  + Use controller mount point for extension cgroup path (#1899)
  + Improvements in setup of cgroups (#1896)
  + Remove ExtensionsMetricsData and per-process Memory data (#1884)
  + Fix return value of start_extension_command (#1927)
  + Remove import * (#1900)
  + Fix flaky ExtensionCleanupTest class (#1898)
  + Fix codecov badge (#1883)
  + Changed codecov to run on py3.8 (#1875)
  + Update documentation on /dev/random (#1909)
  + Mount options are in mount(8) (#1893)
  + Remove ssh host key thumbprint in report ready (#1913)
  + Emit AutoUpdate value at service start only (#1907)
  + Add logging for version mismatch (#1895)
  + Send telemetry event if libdir changes (#1897)
  + Add log collector utility (#1847)
  + Move AutoUpdate reporting to HeartBeat event (#1919)
  + Removing infinite download of extension manifest without a new GS (#1874)
  + Fix wrongful dir deletion (#1873)
  + Fix the cleanup-outdated-handlers to only delete handlers that are not
    present in the GS (#1889)
  + Expose periods of environment thread in waagent.conf (#1891)
  + Added user @kevinclark19a as Contributor. (#1906)
- From 2.2.48.1
  + Refactoring GoalState class out of Protocol, making Protocol thread-safe,
    removing stale dependencies of Protocol and removing the dependency on
    the file system to read the Protocol info
  + Fetch goal state when creating HostPluginProtocol (#1799)
  + Separate goal state from the protocol class (#1777)
  + Make protocol util a singleton per thread (#1743, #1756)
  + Fetch goal state before sending telemetry (#1751)
  + Remove file dependency (#1754)
  + Others (#1758, #1767, #1744, #1749, #1816, #1820)
  + New logs for goal state fetch (#1797) and refresh (#1794).
  + Thread name added to logs (#1778)
  + Populate telemetry events at creation time (#1791)
  + Periodic HeartBeat to be logged to the file (#1755)
  + Add unit test to verify call stacks on telemetry events (#1828)
  + Others (#1841, #1842, #1846)
  + Handling errors while reading extension status files
    (Limiting Size and Transient issues)(#1761)
  + Enable SWAP on Resource Disk as Application Certification Support
    suggested (#1762)
  + Update 'Provisioning' options in default configs ( #1853)
  + Drop Metadata Server Support (#1806, #1839, #1840 )
  + Improve documentation of ResourceDisk.EnableSwapEncryption (#1782)
  + Removed is_snappy function (#1774)
  + Handle exceptions in monitor thread (#1770)
  + Fix timestamp for periodic operations in the monitor thread (#1879)
  + Fix permissions on the Ubuntu systemd service file (#1814)
  + Update hostname setting for SUSE distros (#1832)
  + Python 3.8 improvements + support for Ubuntu 20.04 (#1860, #1865, #1738)
  + Testing and dev-infra improvements
    [#1771, #1768, #1800, #1826, #1827, #1833]
  + Others (#1854, #1858)
- From 2.2.46
  + [#1741] Do not update goal state when refreshing the host plugin
  + [#1731] Fix upgrade sequence when update command fails
  + [#1725] Initialize CPU usage
  + [#1716, #1737] Added UTC logging and correcting the format
  + [#1651, #1729] Start sending PerformanceCounter metrics and
    additional memory information for Cgroups</changelog>
  <changelog author="rjschwei@suse.com" date="1601726400">- Update proper_dhcp_config_set.patch (bsc#1177161, bsc#1177257)
  + Add missing imports</changelog>
  <changelog author="rjschwei@suse.com" date="1610452800">- Add sle_hpc-is-sles.patch (bsc#1180719)
  + Recognise SLE_HPC as SLES and use the proper RDMA handler and
    distro specific initialization code</changelog>
  <changelog author="rjschwei@suse.com" date="1612008000">- Add sysvinit-tools as dependency (bsc#1181600, bsc#1181601)</changelog>
</package>
<package pkgid="397ae5558f2eac6d1457c8714dd9d74386a3cd569fee58cead35515d804f1370" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="10.15.1"/>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
</package>
<package pkgid="3711fecefdb557e72f4e1dca9eb6bc6814caca50ca60ca8aba0a390d46cae36e" name="python3-Babel" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix provides/obsoletes</changelog>
  <changelog author="tbechtold@suse.com" date="1503489600">- update to 2.5.0:
  * Numbers: Add currency utilities and helpers (#491) (@kdeldycke)
  * Support PyInstaller (#500, #505) (@wodo)
  * Dates: Add __str__ to DateTimePattern (#515) (@sfermigier)
  * Dates: Fix an invalid string to bytes comparison when parsing TZ files on Py3 (#498) (@rowillia)
  * Dates: Formatting zero-padded components of dates is faster (#517) (@akx)
  * Documentation: Fix "Good Commits" link in CONTRIBUTING.md (#511) (@naryanacharya6)
  * Documentation: Fix link to Python gettext module (#512) (@Linkid)
  * Messages: Allow both dash and underscore separated locale identifiers in pofiles (#489, #490) (@akx)
  * Messages: Extract Python messages in nested gettext calls (#488) (@sublee)
  * Messages: Fix in-place editing of dir list while iterating (#476, #492) (@MarcDufresne)
  * Messages: Stabilize sort order (#482) (@xavfernandez)
  * Time zones: Honor the no-inherit marker for metazone names (#405) (@akx)</changelog>
  <changelog author="arun@gmx.de" date="1507204800">- specfile:
  * require freezegun for tests
- update to version 2.5.1:
  * Use a fixed datetime to avoid test failures (#520)
    (@narendravardi)
  * Parse multi-line __future__ imports better (#519) (@akx)
  * Fix validate_currency docstring (#522)
  * Allow normalize_locale and exists to handle various unexpected
    inputs (#523) (@suhojm)
  * Make PyInstaller support more robust (#525, #526)
    (@thijstriemstra, @akx)</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Export TZ and LC_ALL before running the tests.  Without this
  python-Babel is not able to see the TZ variable, and produce
  a `local` LOCALTZ</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- update to version 2.5.3:
  * This is a maintenance release that reverts undesired API-breaking
    changes that slipped into 2.5.2 (see
    https://github.com/python-babel/babel/issues/550). It is based on
    v2.5.1 (f29eccd) with commits 7cedb84, 29da2d2 and edfb518
    cherry-picked on top.
- changes from version 2.5.2:
  * Bugfixes
    + Revert the unnecessary PyInstaller fixes from 2.5.0 and 2.5.1
    (#533) (@yagebu)</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 2.6.0:
  * Possibly incompatible changes
    + Numbers: Refactor decimal handling code and allow bypass of
    decimal quantization. (@kdeldycke) (PR #538)
    + Messages: allow processing files that are in locales unknown to
    Babel (@akx) (PR #557)
    + General: Drop support for EOL Python 2.6 and 3.3 (@hugovk) (PR
    [#546])
  * Other changes
    + CLDR: Use CLDR 33 (@akx) (PR #581)
    + Lists: Add support for various list styles other than the
    default (@akx) (#552)
    + Messages: Add new PoFileError exception (@Bedrock02) (PR #532)
    + Times: Simplify Linux distro specific explicit timezone setting
    search (@scop) (PR #528)
  * Bugfixes
    + CLDR: avoid importing alt=narrow currency symbols (@akx) (PR
    [#558])
    + CLDR: ignore non-Latin numbering systems (@akx) (PR #579)
    + Docs: Fix improper example for date formatting (@PTrottier) (PR
    [#574])
    + Tooling: Fix some deprecation warnings (@akx) (PR #580)
  * Tooling &amp; docs
    + Add explicit signatures to some date autofunctions (@xmo-odoo)
    (PR #554)
    + Include license file in the generated wheel package (@jdufresne)
    (PR #539)
    + Python 3.6 invalid escape sequence deprecation fixes (@scop) (PR
    [#528])
    + Test and document all supported Python versions (@jdufresne) (PR
    [#540])
    + Update copyright header years and authors file (@akx) (PR #559)</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="pgajdos@suse.com" date="1559649600">- version update to 2.7.0
  Possibly incompatible changes
  * General: Internal uses of ``babel.util.odict`` have been replaced with
    ``collections.OrderedDict`` from The Python standard library.
  Improvements
  * CLDR: Upgrade to CLDR 35.1 - Alberto Mardegan, Aarni Koskela (#626, #643)
  * General: allow anchoring path patterns to the start of a string -
    Brian Cappello (#600)
  * General: Bumped version requirement on pytz - @chrisbrake (#592)
  * Messages: `pybabel compile`: exit with code 1 if errors were encountered
  - Aarni Koskela (#647)
  * Messages: Add omit-header to update_catalog - Cédric Krier (#633)
  * Messages: Catalog update: keep user comments from destination by default
  - Aarni Koskela (#648)
  * Messages: Skip empty message when writing mo file - Cédric Krier (#564)
  * Messages: Small fixes to avoid crashes on badly formatted .po files
  - Bryn Truscott (#597)
  * Numbers: `parse_decimal()` `strict` argument and `suggestions`
  - Charly C (#590)
  * Numbers: don't repeat suggestions in parse_decimal strict - Serban
    Constantin (#599)
  * Numbers: implement currency formatting with long display names
  - Luke Plant (#585)
  * Numbers: parse_decimal(): assume spaces are equivalent to non-breaking
    spaces when not in strict mode - Aarni Koskela (#649)
  * Performance: Cache locale_identifiers() - Aarni Koskela (#644)
  Bugfixes
  * CLDR: Skip alt=... for week data (minDays, firstDay, weekendStart,
    weekendEnd) - Aarni Koskela (#634)
  * Dates: Fix wrong weeknumber for 31.12.2018 - BT-sschmid (#621)
  * Locale: Avoid KeyError trying to get data on WindowsXP - mondeja (#604)
  * Locale: get_display_name(): Don't attempt to concatenate variant
    information to None - Aarni Koskela (#645)
  * Messages: pofile: Add comparison operators to _NormalizedString - Aarni
    Koskela (#646)
  * Messages: pofile: don't crash when message.locations can't be sorted
  - Aarni Koskela (#646)</changelog>
  <changelog author="mcalabkova@suse.com" date="1578916800">- update to 2.8.0
  * CLDR: Upgrade to CLDR 36.0
  * Messages: Don't even open files with the "ignore" extraction method
  * Numbers: Fix formatting very small decimals when quantization is disabled
  * Messages: Attempt to sort all messages</changelog>
  <changelog author="mcepl@suse.com" date="1637928000">- Add CVE-2021-42771-rel-path-traversal.patch fixing
  CVE-2021-42771 by cleaning locale identifiers before loading
  from file (bsc#1185768).</changelog>
</package>
<package pkgid="a3e2176981753d4a3a191a0f8fa77502aa0dc78519ef9b2ace00aa1dcded9c53" name="python3-Jinja2" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="3.10.2"/>
  <changelog author="mcihar@suse.cz" date="1408104000">- run testsuite during build</changelog>
  <changelog author="jengelh@inai.de" date="1437566400">- Use %python_version over %py_ver: better portability to RHEL</changelog>
  <changelog author="aplanas@suse.com" date="1447934400">- Update to 2.8
  - Added `target` parameter to urlize function.
  - Added support for `followsymlinks` to the file system loader.
  - The truncate filter now counts the length.
  - Added equalto filter that helps with select filters.
  - Changed cache keys to use absolute file names if available
    instead of load names.
  - Fixed loop length calculation for some iterators.
  - Changed how Jinja2 enforces strings to be native strings in
    Python 2 to work when people break their default encoding.
  - Added :func:`make_logging_undefined` which returns an undefined
    object that logs failures into a logger.
  - If unmarshalling of cached data fails the template will be
    reloaded now.
  - Implemented a block ``set`` tag.
  - Default cache size was incrased to 400 from a low 50.
  - Fixed ``is number`` test to accept long integers in all Python versions.
  - Changed ``is number`` to accept Decimal as a number.
  - Added a check for default arguments followed by non-default arguments. This
    change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The
    previous behavior for this code was broken anyway (resulting in the default
    value being applied to `y`).
  - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and
    ``jinja2.runtime.Context`` by adding two new attributes to the environment
    (`code_generator_class` and `context_class`) (pull request ``#404``).
  - added support for context/environment/evalctx decorator functions on
    the finalize callback of the environment.
  - escape query strings for urlencode properly.  Previously slashes were not
    escaped in that place.
  - Add 'base' parameter to 'int' filter.
- Tests are removed from the package (not distributed in the tar.gz)</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to 2.9.5  (bsc#1132174, CVE-2016-10745)
  (see the changes in /usr/share/doc/packages/python-Jinja2/CHANGES)
- updated source URL</changelog>
  <changelog author="dmueller@suse.com" date="1490184000">- fix requires</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update for singlespec
- update to 2.9.6
  * fixed custom context behavior in fast resolve mode</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- specfile:
  * CHANGES -&gt; CHANGES.rst
  * added README.rst to %doc section
- update to version 2.10:
  * Added a new extension node called "OverlayScope" which can be used
    to create an unoptimized scope that will look up all variables
    from a derived context.
  * Added an "in" test that works like the in operator.  This can be
    used in combination with "reject" and "select".
  * Added "previtem" and "nextitem" to loop contexts, providing access
    to the previous/next item in the loop. If such an item does not
    exist, the value is undefined.
  * Added "changed(*values)" to loop contexts, providing an easy way
    of checking whether a value has changed since the last iteration
    (or rather since the last call of the method)
  * Added a "namespace" function that creates a special object which
    allows attribute assignment using the "set" tag.  This can be used
    to carry data across scopes, e.g. from a loop body to code that
    comes after the loop.
  * Added a "trimmed" modifier to "{% trans %}" to strip linebreaks
    and surrounding whitespace. Also added a new policy to enable this
    for all "trans" blocks.
  * The "random" filter is no longer incorrectly constant folded and
    will produce a new random choice each time the template is
    rendered. (`#478`_)
  * Added a "unique" filter. (`#469`_)
  * Added "min" and "max" filters. (`#475`_)
  * Added tests for all comparison operators: "eq", "ne", "lt", "le",
    "gt", "ge". (`#665`_)
  * "import" statement cannot end with a trailing comma. (`#617`_,
    `#618`_)
  * "indent" filter will not indent blank lines by default. (`#685`_)
  * Add "reverse" argument for "dictsort" filter. (`#692`_)
  * Add a "NativeEnvironment" that renders templates to native Python
    types instead of strings. (`#708`_)
  * Added filter support to the block "set" tag. (`#489`_)
  * "tojson" filter marks output as safe to match documented behavior.
    (`#718`_)
  * Resolved a bug where getting debug locals for tracebacks could
    modify template context.
  * Fixed a bug where having many "{% elif ... %}" blocks resulted in
    a "too many levels of indentation" error.  These blocks now
    compile to native "elif ..:" instead of "else: if ..:" (`#759`_)</changelog>
  <changelog author="arun@gmx.de" date="1555156800">- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
  * "SandboxedEnvironment" securely handles "str.format_map" in order
    to prevent code execution through untrusted format strings.  The
    sandbox already handled "str.format".</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have
  been called with untrusted user data (bsc#1181944).
  Added CVE-2020-28493.patch</changelog>
  <changelog author="atoptsoglou@suse.com" date="1613649600">- Fixed IndentationError in CVE-2020-28493.patch (bsc#1182244)</changelog>
</package>
<package pkgid="592ff5874902f30a09f60daeb34bb8c07ff4365303760080508f4f3913cb84ef" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.35.2" rel="3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1508328000">- Update to 0.27.0
  * Fix licence: it is MIT, not BSD
  * At least minimal support of SNI in httpslib.
  * Small bugfixes and cleanups.
  * More effort to make build system more robust.
  * Restore m2.rsa_set_e() and m2.rsa_set_n().
  * Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
  (the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
  was complaining around 75% of the package was documentation.</changelog>
  <changelog author="alarrosa@suse.com" date="1508500800">- Remove unnecessary fdupes call</changelog>
  <changelog author="michael@stroeder.com" date="1508932800">- License set to MIT</changelog>
  <changelog author="jmatejek@suse.com" date="1510142400">- use generic way to require python-typing now that python3 provides it</changelog>
  <changelog author="michael@stroeder.com" date="1518091200">- Removed obsolete patches fix-build-python3.diff
  and fix-openssl-include-path.diff
- Update to 0.28.1
  * compability with Python 3
  * building on Mac OS X should be now more reliable and automagic
  * Fix licence in metadata: it is MIT, not BSD
  * Fix and add tests for SWIG/_aes.i module
  * Bundle-in unittest2 for Python 2.6
  * Remove all PGP modules</changelog>
  <changelog author="tchvatal@suse.com" date="1518177600">- Enable tests, fix docu install phase</changelog>
  <changelog author="michael@stroeder.com" date="1518177601">- Update to 0.28.2:
  * Fix ppc builds</changelog>
  <changelog author="mcepl@suse.com" date="1559044800">- Fix use of urlunsplit (bsc#1135009)</changelog>
  <changelog author="mcepl@suse.com" date="1568808000">- bsc#1149792 jsc#SLE-9135 Update to 0.35.2, bugfixes only.
  Changes cumulatively:
  - fix compatibility with OpenSSL 1.1.1c. Thank you,
    Sebastian Andrzej Siewior from the Debian team for resolving it.
  - Stop pretending to support Python 3.4.
  - The project is now Linux-distribution agnostic
  - Replace all old-style classes with the new ones (it shouldn't cause
    any problems, but feel free to file an issue, if it does)
  - Do not by-pass a potential transfer decoding in m2urllib2
  - SSLv3 just removed.
  - Various fixes of the build system and internal errors.
- Patch fix_urlunsplit.patch is removed, because it is included
  in the upstream tarball.</changelog>
  <changelog author="jgonzalez@suse.com" date="1590667200">- Add python3-M2crypto to LTSS channels, to allow using salt even
  when the Server Applications Module is not used (bsc#1172226)</changelog>
</package>
<package pkgid="a12f328a138b0b59e8eefb57a906034e762e15f1a70bc47d3cd462e387ae7ccc" name="python3-MarkupSafe" arch="x86_64">
  <version epoch="0" ver="1.0" rel="1.29"/>
  <changelog author="andrea.turrini@gmail.com" date="1315483200">- Fixed typo in description of python-MarkupSafe.spec</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337774400">- python3 package added
- minor spec improvement</changelog>
  <changelog author="dmueller@suse.com" date="1372161600">- update to 0.18:
  + Fixed interpolation on tuples
  + Varios Python 3.x fixes</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="mcihar@suse.cz" date="1394712000">- update to 0.19:
  + Various Python 3.x fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1399550400">- Update to 0.21
  + No upstream changelog
  - ------------------------------------------------------------------</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 0.23
  + No upstream changelog</changelog>
  <changelog author="tbechtold@suse.com" date="1490184000">- update to 1.0.0
  + No upstream changelog
- Switch to singlespec approach</changelog>
  <changelog author="tbechtold@suse.com" date="1490184001">- Add missing BuildRequires for python-rpm-macros</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update source url
- fix obs/prov to refer to old python
- drop _speedups.c from installed directory</changelog>
</package>
<package pkgid="0f7071694ef4765b3f19f147cbd9aff4a9c676733178fa7ec474b8ea21d6591b" name="python3-PyYAML" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="1.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1488542400">- Use pythonhosted.org for the reference link.
- Provide python-yaml instead of python2-yaml again.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531656000">- update to 3.13
  * fix compactibility with python 3.7</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tchvatal@suse.com" date="1552564800">- Update to 5.1:
  * many changes, see CHANGES
  * bsc#1099308 CVE-2017-18342 PyYAML: yaml.load() API could execute arbitrary code</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559908800">- update to 5.1.1
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8</changelog>
  <changelog author="mcalabkova@suse.com" date="1564660800">- update to 5.1.2
  * Re-release of 5.1 with regenerated Cython sources to build properly for Python 3.8b2+</changelog>
  <changelog author="mimi.vx@gmail.com" date="1575374400">- update to 5.2
  * A more flexible fix for custom tag constructors
  * Change default loader for yaml.add_constructor
  * Change default loader for add_implicit_resolver, add_path_resolver
  * Move constructor for object/apply to UnsafeConstructor
  * Fix logic for quoting special characters</changelog>
  <changelog author="mimi.vx@gmail.com" date="1578398400">- update to 5.3
  * Use `is` instead of equality for comparing with `None`
  * fix typos and stylistic nit
  * Fix up small typo
  * Fix handling of __slots__
  * Allow calling add_multi_constructor with None
  * Add use of safe_load() function in README
  * Fix reader for Unicode code points over 0xFFFF
  * Enable certain unicode tests when maxunicode not &gt; 0xffff
  * Use full_load in yaml-highlight example
  * Document that PyYAML is implemented with Cython
  * Fix for Python 3.10
  * increase size of index, line, and column fields
  * remove some unused imports
  * Create timezone-aware datetimes when parsed as such
  * Add tests for timezone</changelog>
  <changelog author="mimi.vx@gmail.com" date="1584619200">- update to 5.3.1
  * fixes boo#1165439 (cve-2020-1747) Prevents arbitrary code execution
  during python/object/new constructor</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 5.4.1 (bsc#1174514, CVE-2020-14343):
  * Fix stub compat with older pyyaml versions that may unwittingly load it
  * Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
  * Fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
  * Fix memory leak in implicit resolver setup
  * Fix py2 copy support for timezone objects
  * Fix compatibility with Jython</changelog>
</package>
<package pkgid="5db9b7547c7d9b46c2083bc197e1eedd190d22acc3843f1d9b66dea7718483df" name="python3-appdirs" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="1.21"/>
  <changelog author="toddrme2178@gmail.com" date="1395662400">- Initial version</changelog>
  <changelog author="tbechtold@suse.com" date="1433332800">- update to 1.4.0:
  - [PR #42] AppAuthor is now optional on Windows
  - [issue 41] Support Jython on Windows, Mac, and Unix-like platforms. Windows
    support requires `JNA &lt;https://github.com/twall/jna&gt;`_.
  - [PR #44] Fix incorrect behaviour of the site_config_dir method
  - [Unix, issue 16] Conform to XDG standard, instead of breaking it for
    everybody
  - [Unix] Removes gratuitous case mangling of the case, since \*nix-es are
    usually case sensitive, so mangling is not wise
  - [Unix] Fixes the uterly wrong behaviour in ``site_data_dir``, return result
    based on XDG_DATA_DIRS and make room for respecting the standard which
    specifies XDG_DATA_DIRS is a multiple-value variable
  - [Issue 6] Add ``*_config_dir`` which are distinct on nix-es, according to
    XDG specs; on Windows and Mac return the corresponding ``*_data_dir``
- Remove unzip as BuildRequires. tar.gz file now provided and used</changelog>
  <changelog author="jmatejek@suse.com" date="1487851200">- update for single-spec
- desetuptoolize.patch : switch from setuptools to distutils.core
  for installation, as this is now a setuptools dependency
- ensure egg-info is a directory (distutils would install it as file)
- update to 1.4.1
  * [issue 55] make appname optional</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 1.4.3:
  - [PR #76] Python 3.6 invalid escape sequence deprecation fixes
  - Fix for Python 3.6 support
  - [PR #84] Allow installing without setuptools
  - [PR #86] Fix string delimiters in setup.py description
  - Add Python 3.6 support
- drop desetuptoolize.patch . no longer needed.</changelog>
</package>
<package pkgid="1644b8224438e13021ff0316606cc43bfcffab8e0d5b88b2af82a4cb1e436d07" name="python3-asn1crypto" arch="noarch">
  <version epoch="0" ver="0.24.0" rel="3.2.1"/>
  <changelog author="tbechtold@suse.com" date="1489665600">- Initial packaging (version 0.22.0)</changelog>
  <changelog author="jengelh@inai.de" date="1489752000">- Ensure neutrality of descriptions</changelog>
  <changelog author="arun@gmx.de" date="1510401600">- update to version 0.23.0:
  * Backwards compatibility break: the tag_type, explicit_tag and
    explicit_class attributes on core.Asn1Value no longer exist and
    were replaced by the implicit and explicit attributes. Field param
    dicts may use the new explicit and implicit keys, or the old
    tag_type and tag keys. The attribute changes will likely to have
    little to no impact since they were primarily an implementation
    detail.
  * Teletex strings used inside of X.509 certificates are now
    interpreted using Windows-1252 (a superset of ISO-8859-1). This
    enables compatibility with certificates generated by
    OpenSSL. Strict parsing of Teletex strings can be retained by
    using the x509.strict_teletex() context manager.
  * Added support for nested explicit tagging, supporting values that
    are defined with explicit tagging and then added as a field of
    another structure using explicit tagging.
  * Fixed a UnicodeDecodeError when trying to find the (optional)
    dependency OpenSSL on Python 2
  * Fixed next_update field of crl.TbsCertList to be optional
  * Added the x509.Certificate.sha256_fingerprint property
  * x509.Certificate.ocsp_urls and x509.DistributionPoint.url will now
    return https://, ldap:// and ldaps:// URLs in addition to http://.
  * Added CMS Attribute Protection definitions from RFC 6211
  * Added OIDs from RFC 6962</changelog>
  <changelog author="arun@gmx.de" date="1513425600">- update to version 0.24.0:
  * x509.Certificate().self_signed will no longer return "yes" under
    any circumstances. This helps prevent confusion since the library
    does not verify the signature. Instead a library like oscrypto
    should be used to confirm if a certificate is self-signed.
  * Added various OIDs to x509.KeyPurposeId()
  * Added x509.Certificate().private_key_usage_period_value
  * Added structures for parsing common subject directory attributes
    for X.509 certificates, including x509.SubjectDirectoryAttribute()
  * Added algos.AnyAlgorithmIdentifier() for situations where an
    algorithm identifier may contain a digest, signed digest or
    encryption algorithm OID
  * Fixed a bug with
    x509.Certificate().subject_directory_attributes_value not
    returning the correct value
  * Fixed a bug where explicitly-tagged fields in a core.Sequence()
    would not function properly when the field had a default value
  * Fixed a bug with type checking in pem.armor()</changelog>
</package>
<package pkgid="cfda33b9078c5ebef57bd754b9c6d05462a258a3b2113453d756b26da5f4bbad" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="3.2"/>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)
- Resolve issue with previous change if both Python2 and Python3 are
  present, tests were failing as python2 bindings are preferred in this
  case.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.6.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
</package>
<package pkgid="e22824f1ab3d94e29ff7646c6c8a4504c598d57cc25a2a6b581463aea20e584d" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="10.15.1"/>
  <changelog author="mcepl@suse.com" date="1632398400">- Make build working even on older SLEs.</changelog>
  <changelog author="mcepl@suse.com" date="1632398401">- Make python36 primary interpreter on SLE-15</changelog>
  <changelog author="mcepl@suse.com" date="1633521600">- Due to conflicting demands of bsc#1183858 and platforms where
  Python 3.6 is only in interpreter+pip set we have to make
  complicated ugly construct about Sphinx BR.</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
</package>
<package pkgid="147321377b58cea548df41b8d615ea8f18ee95e2c11530c2f21686855a7142e2" name="python3-certifi" arch="noarch">
  <version epoch="0" ver="2018.1.18" rel="1.18"/>
  <changelog author="jacobwinski@gmail.com" date="1464955200">- Update to version 2016.2.28
- Update copyright year in spec file
- Fix executable warning (fix taken from python3-certifi)</changelog>
  <changelog author="aloisio@gmx.com" date="1491652800">- Updated to version 2017.1.23
- Converted to single-spec
- Updated source URL</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 2017.4.17</changelog>
  <changelog author="dmueller@suse.com" date="1497182400">- require ca-certificates-mozilla, otherwise certifi does not
  provide any ca bundle (the bundled one that openSUSE patches
  out is the mozilla bundle as well)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.
- Fix script-without-shebang rpmlint warning.</changelog>
  <changelog author="arun@gmx.de" date="1507032000">- updated patch
- update to version 2017.7.27.1:
  * Use a more expressive API for getting the dir a path is in
  * set zip_safe=False to help out setuptools (#63)
  * Change license from ISC to MPL-2.0 in setup.py
  * Add trove classifiers for missing supported Python versions
  * Rename [wheel] section to [bdist_wheel] as the former is legacy</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1507809600">- add patch to fix version string from 2017.07.27.1 to
  2017.7.27.1 to fix the build on SLE12_SP3 and earlier
  + python-certifi-fix-version-string.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1508328000">- fix macros to support not having python2</changelog>
  <changelog author="dmueller@suse.com" date="1510660800">- update to 2017.11.5:
  * Sync with bundle mozilla release
- remove  python-certifi-fix-version-string.patch: obsolete</changelog>
  <changelog author="arun@gmx.de" date="1517745600">- specfile:
  * update copyright year
- update to version 2018.1.18:
  * Remove 1024-bit root certificates
  * Include license in the list of trove classifiers
  * Include license file in the generated wheel package</changelog>
</package>
<package pkgid="6726357f517b94f483db8ab6020ad154061d8820543ee9b9cadde9a496dd3705" name="python3-cffi" arch="x86_64">
  <version epoch="0" ver="1.13.2" rel="3.2.5"/>
  <changelog author="mcepl@suse.com" date="1537272000">- Switch off falling tests with new patch
  ignore-tests.patch instead of -k parameter for py.test.
  https://bitbucket.org/cffi/cffi/issues/384/</changelog>
  <changelog author="mcepl@suse.com" date="1537358400">- Remove ignore-tests.patch -- testing what will happen
- Add e2e324a2f13e3a646de6f6ff03e90ed7d37e2636.patch from
  upstream to remove some warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1537531200">- Add 3184b0a675fc425b821b528d7fdf744b2f08dadf.patch as
  a workaround against
  https://bitbucket.org/cffi/cffi/issues/378/ (possible bug in
  GCC, see https://bugzilla.redhat.com/1552724).</changelog>
  <changelog author="mcepl@suse.com" date="1539777600">- Fix calling of py.test executor.</changelog>
  <changelog author="mcepl@suse.com" date="1540814400">- Add 7a76a381534012af4790e815140d1538510b7d93.patch to fix
  bsc#1111657 (we need use to proper void returning function not
  to corrupt memory in tests).</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551528000">- update to 1.12.3
- drop patches: 3184b0a675fc425b821b528d7fdf744b2f08dadf.patch
    7a76a381534012af4790e815140d1538510b7d93.patch
    e2e324a2f13e3a646de6f6ff03e90ed7d37e2636.patch
  * Direct support for pkg-config.
  * ffi.from_buffer() takes a new optional first argument that gives the array
    type of the result. It also takes an optional keyword argument require_writable
    to refuse read-only Python buffers.
  * ffi.new(), ffi.gc() or ffi.from_buffer() cdata objects can now be released
    at known times, either by using the with keyword or by calling the new ffi.release().
  * Accept an expression like ffi.new("int[4]", p) if p is itself another cdata int[4].
  * CPython 2.x: ffi.dlopen() failed with non-ascii file names on Posix
  * CPython: if a thread is started from C and then runs Python code
    (with callbacks or with the embedding solution), then previous versions of cffi
    would contain possible crashes and/or memory leaks.
  * Support for ffi.cdef(..., pack=N) where N is a power of two.</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove test suite exception which was fixed by 7a76a38153*.patch
- Add doc/*/*.rst to %doc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1556625600">- Update to 1.12.3
  * Fix for nested struct types that end in a var-sized array (#405).
  * Add support for using U and L characters at the end of integer constants in ffi.cdef() (thanks Guillaume).
  * More 3.8 fixes.</changelog>
  <changelog author="tchvatal@suse.com" date="1571140800">- Update to 1.13.0:
  * No changelog provided upstream</changelog>
  <changelog author="toddrme2178@gmail.com" date="1574078400">- Update to 1.13.2:
  * re-release because the Linux wheels came with an attached version of libffi that was very old and buggy
- Update to 1.13.1:
  * deprecate the way to declare in cdef() a global variable with only void *foo;. You should always use a storage class, like extern void *foo; or maybe static void *foo;. These are all equivalent for the purposes of cdef(), but the reason for deprecating the bare version is that (as far as I know) it would always be mistake in a real C header.
  * fix the regression RuntimeError: found a situation in which we try to build a type recursively.
  * fixed issue #427 where a multithreading mistake in the embedding logic initialization code would cause deadlocks on CPython 3.7.</changelog>
</package>
<package pkgid="f6a394c6622db8706d6c101c15858fe2d5590ea0b6b855c68ce0759ece57aabf" name="python3-chardet" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="3.23"/>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
</package>
<package pkgid="9946783ebd981c6cb2ac9d40eb161d911aed926c2e6c696265f0d4ad51bd435f" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="2.8" rel="10.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="mcepl@suse.com" date="1606737600">- Add 5507-mitigate-Bleichenbacher-attacks.patch (bsc#1178168,
  CVE-2020-25659).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1614168000">- Add patch CVE-2020-36242-buffer-overflow.patch (bsc#1182066, CVE-2020-36242)
  * Using the Fernet class to symmetrically encrypt multi gigabyte values
    could result in an integer overflow and buffer overflow.</changelog>
</package>
<package pkgid="e6720c6f4c642087b27f96820465ea404abddbd0d37c20e8ac1387124c3196ab" name="python3-dbus-python" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="6.3.1"/>
  <changelog author="jmatejek@suse.com" date="1510660800">- drop unneeded epydoc requirement (API docs were not built anyway)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="jmatejek@suse.com" date="1513598400">- drop unneeded epydoc requirement properly</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Use requires_ge instead of the rpm calls</changelog>
  <changelog author="tchvatal@suse.com" date="1530705601">- Version update to version 1.2.8:
  * Python 2.7 required or 3.4 respectively
  * Tests use tap.py functionality
  * Upstream dropped epydoc completely
  * See NEWS for more</changelog>
  <changelog author="nicolas.bock@suse.com" date="1538395200">- Add missing dependency for pkg-config files</changelog>
  <changelog author="mgorse@suse.com" date="1578484800">- Version update to version 1.2.14:
  * Ensure that the numeric types from dbus.types get the same
    str() under Python 3.8 that they did under previous versions.
  * Disable -Winline.
  * Add Python 3.8 to CI.
  - Changes in version 1.2.12:
  * Don't save and restore the exception indicator when called
    from C code.
  - Changes in version 1.2.10:
  * Rewrite CONTRIBUTING.md document, based on Wayland's equivalent
  * Add clearer license information using SPDX-License-Identifier.
  * Improve test coverage.
  * Don't set deprecated tp_print to NULL under Python 3.
  * Include inherited methods and properties when documenting
    objects, which regressed when migrating from epydoc to sphinx.
  * Add missing variant_level member to UnixFd type, for parity
    with the other dbus.types types (dbus-python!3.
  - Note that this is a potentially incompatible change: unknown
    keyword arguments were previously ignored (!) and are now an
    error.
  * Don't reply to method calls if they have the NO_REPLY_EXPECTED
    flag (fd.o#32529, dbus-python#26.
  * Silence -Wcast-function-type with gcc 8.
  * Fix distcheck with python3.7 by deleting __pycache__ during
    uninstall.
  * Consistently save and restore the exception indicator when
    called from C code.
  * Avoid a long-standing race condition in the automated tests.
  * Fix Qt website URL.
- Up dbus dependency; 1.8 is now required.</changelog>
  <changelog author="code@bnavigator.de" date="1607688000">- Support builds with more than one python3 flavor
  gh#openSUSE/python-rpm-macros#66
- Remove shebang from examples (rpmlint warning, is in common doc)
- Clean duplicate python flavor variables for configure
- Update the provides/obsoletes tags for old-style dbus-1-$python</changelog>
  <changelog author="dmueller@suse.com" date="1610193600">- update to 1.2.16:
  * All tests are run even if the tap.py module is not available, although
    diagnostics for failing tests will be better if it is present.
  * Forbid unexpanded AX-prefixed macros more selectively</changelog>
  <changelog author="sflees@suse.de" date="1623240000">- Update to latest version from tumbleweed jira#OPENSUSE-22
  boo#1183818
- Enable testsuite</changelog>
</package>
<package pkgid="8626462cabe840432f1ac5905683f4626dcbb49665ec12c0aad6855e54cfaa87" name="python3-decorator" arch="noarch">
  <version epoch="0" ver="4.4.2" rel="7.3.13"/>
  <changelog author="jmatejek@suse.com" date="1491393600">- fix source url</changelog>
  <changelog author="tbechtold@suse.com" date="1502280000">- update to 4.1.2:
  * Made it possible to define decorators converting coroutines into regular
    functions.
  * Changed the documentation build system to sphinx and uploaded the docs
    on readthedocs.org.
  * Support for Python 3.5 coroutines defined with `async def`, thanks to
    Victor-Nicolae Savu who raised the issue of `iscoroutinefunction` not
    giving the right answer for coroutines decorated with the decorator module.</changelog>
  <changelog author="arun@gmx.de" date="1516190400">- specfile:
  - updated copyright year
- updated to version 4.2.1:
  * Fixed a regression breaking IPython reported by
    https://github.com/spapini .
- changes from version 4.2.0 :
  * Added a facility to define families of decorators (aka decorators
    with arguments) as requested by several users. Accepted a pylint
    patch by David Allouche.</changelog>
  <changelog author="arun@gmx.de" date="1523966400">- update to version 4.3.0:
  * Extended the decorator family facility to work with positional
    arguments and updated the documentation. Removed
    decorator.getargspec and provided decorator.getfullargspec
    instead. This is convenient for users of Python 2.6/2.7, the
    others can just use inspect.getfullargspec.</changelog>
  <changelog author="jengelh@inai.de" date="1523966401">- Ensure neutrality of description.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1550059200">- update to version 4.3.2
  * now the decorator module can decorate generator functions by
    preserving their being generator functions
  * Set `python_requires='&gt;=2.6, !=3.0.*, !=3.1.*'` in setup.py
- update to version 4.3.1
  * Added a section "For the impatient" to the README, addressing
    an issue raised by Amir Malekpour.
  * Added support for Python 3.7.
  * Now  the path to the decorator module appears in the
    tracebacks, as suggested by a user at EuroPython 2018.</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Update to 4.4.0:
  * Fixed a regression with decorator factories breaking the case with no
    arguments by going back to the syntax used in version 4.2.</changelog>
  <changelog author="dmueller@suse.com" date="1576843200">- update to 4.4.1:
  Changed the description to "Decorators for Humans" are requested by
  several users. Fixed a .rst bug in the description as seen in PyPI.</changelog>
  <changelog author="dmueller@suse.com" date="1584187200">- update to 4.4.2:
  * removing the usage of `__file__`, that was breaking PyOxidizer.
  * fixes for the future Python 3.9.
  * some fixes for the future Python 3.10.</changelog>
</package>
<package pkgid="4018bf4a56cbb0c8967bf8b98a13ec4fc075f39a4fa42993a20f59f99349c81c" name="python3-distro" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="3.5.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1512129600">- update to version 1.1.0 / 1.0.5:
  * Include resources needed for tests and docs in source tarballs</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1514116800">- update to version 1.2.0:
  * Explicitly set Python versions for flake8 tests.</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Include in SLE 15 (FATE#324993, boo#997614))</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525953600">- update to version 1.3.0:
  * improvements for other operating systems
  * documentation:
  * Add Ansible reference implementation and fix arch-linux link (#213)
  * Add facter reference implementation (#213)</changelog>
  <changelog author="mcepl@suse.com" date="1528891200">- Enable tests properly (this is pytest, not unittest),
  it is necessary to explicitly set locale to an Unicode one
  (https://github.com/nir0s/distro/issues/223)</changelog>
  <changelog author="mcepl@suse.com" date="1549368000">- Add assert_locale.patch to warn about wrong locale.</changelog>
  <changelog author="tbechtold@suse.com" date="1549454400">- Drop useless BuildRequires of python-flake8 and python-pytest-cov</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1549800000">- Update to version 1.4.0:
  * Backward Compatibility:
  * Prefer the VERSION_CODENAME field of os-release to parsing it from VERSION [[#230](https://github.com/nir0s/distro/pull/230)]
  * Bug Fixes:
  * Return _uname_info from the uname_info() method [[#233](https://github.com/nir0s/distro/pull/233)]
  * Fixed CloudLinux id discovery [[#234](https://github.com/nir0s/distro/pull/234)]
  * Update Oracle matching [[#224](https://github.com/nir0s/distro/pull/224)]
  * Docs:
  * Distro is the recommended replacement for platform.linux_distribution [[#220](https://github.com/nir0s/distro/pull/220)]
  * Release:
  * Use Markdown for long description in setup.py [[#219](https://github.com/nir0s/distro/pull/219)]</changelog>
  <changelog author="steven.kowalik@suse.com" date="1585828800">- Update to 1.5.0:
  * Backward Compatibility:
    + Keep output as native string so we can compatible with python2 interface
  * Bug Fixes:
    + Fix detection of RHEL 6 ComputeNode [#255]
    + Fix Oracle 4/5 lsb_release id and names [#250]
    + Ignore /etc/plesk-release file while parsing distribution</changelog>
  <changelog author="pgajdos@suse.com" date="1590494400">- %python3_only -&gt; %python_alternative</changelog>
</package>
<package pkgid="cdce80c2ec31ceaf5ae47bd789652ae9fe500f21f50f751b5cff96e13e7a81ac" name="python3-evtx" arch="noarch">
  <version epoch="0" ver="0.5.3b" rel="2.21"/>
  <changelog author="cbosdonnat@suse.com" date="1461672000">- Version 0.3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1493812800">- Update to 0.5.3</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
</package>
<package pkgid="2a5cbf0d9e7dcc6f299abab9a036ee488d5b5a46a864645d7ab6d65cd574f846" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="1.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new ?helper? element to replace ?module? More accurately represents the conntrack helper. Deprecates ?module?.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don?t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using ?port?
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify ?set-target values ?default? vs ?reject?
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don?t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of ?[P]? in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add ?zone is an invalid option with ?direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
</package>
<package pkgid="79c6fcf2426008fef21b252e2f24b4987acac5fefaccf544ea424fc899c3d9e9" name="python3-future" arch="noarch">
  <version epoch="0" ver="0.18.2" rel="1.24"/>
  <changelog author="ms@suse.com" date="1476187200">- Tracker changelog entry to add python-future to SLE12 (bnc#999200)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1480075200">- update to 0.16.0
  * Fix newbytes constructor bug.
  * Fix semantics of bool() with newobject.
  * Fix standard_library.install_aliases() on PyPy
  * Fix assertRaises for pow and compile` on Python 3.5.
  * Fix return argument of future.utils.ensure_new_type
  if conversion to new type does not exist.
  * Add missing cmp_to_key for Py2.6.
  * Allow the old_div fixer to be disabled.
  * Improve compatibility with Google App Engine.
  * Add some missing imports to the tkinter and tkinter.filedialog
  package namespaces
  * Fix raise_from on PY3 when the exception cannot be recreated from its repr.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491480000">- Implement single-spec version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1542369600">- Update to version 0.17.1
  * This release address a packaging error because of an erroneous declaration that
    any built wheels are universal.
- Update to version 0.17.0
  * Fix ``from collections import ChainMap`` after install_aliases() (issue #226)
  * Fix multiple import from ``__future__`` bug in futurize (issue #113)
  * Add support for proper %s formatting of newbytes
  * Properly implement iterator protocol for newrange object
  * Fix ``past.translation`` on read-only file systems
  * Fix Tkinter import bug introduced in Python 2.7.4 (issue #262)
  * Correct TypeError to ValueError in a specific edge case for newrange
  * Support inequality tests betwen newstrs and newbytes
  * Add type check to __get__ in newsuper
  * Fix fix_divsion_safe to support better conversion of complex expressions, and
    skip obvious float division.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1552305600">- Activate test suite</changelog>
  <changelog author="jayvdb@gmail.com" date="1557230400">- Change License from MIT to MIT and Python-2.0</changelog>
  <changelog author="mcepl@suse.com" date="1570017600">- Add python38-compat.patch to fix compatibility with Python 3.8
  gh#PythonCharmers/python-future#447
- Add python38-pow.patch not to expect exception on new available
  parameters for Python 3.8. gh#PythonCharmers/python-future#474</changelog>
  <changelog author="steven.kowalik@suse.com" date="1571054400">- Update to 0.18.0.
- Remove python38-compat.patch, already included.
- Add future-correct-mimetype.patch, since Python 3.8 is able to detect
  the MIME type now.</changelog>
  <changelog author="mcepl@suse.com" date="1575547200">- Update to 0.18.2:
  - Fix min/max functions with generators, and 'None' default (PR #514)
  - Use BaseException in raise_() (PR #515)
  - Fix builtins.round() for Decimals (Issue #501)
  - Fix raise_from() to prevent failures with immutable classes (PR #518)
  - Make FixInput idempotent (Issue #427)
  - Fix type in newround (PR #521)
  - Support mimetype guessing in urllib2 for Py3.8+ (Issue #508)
  - fix for raise_() when passed an exception that's not an
    Exception (e.g. BaseException subclasses)
- Rebase future-correct-mimetype.patch to revert incorrect fix in
  gh#PythonCharmers/python-future#508</changelog>
</package>
<package pkgid="4bab460cb6a81ae78198d6ae94c1431dae27e6efb3400b278c0fac204c7eac73" name="python3-gobject" arch="x86_64">
  <version epoch="0" ver="3.34.0" rel="2.27"/>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- Update to version 3.31.2:
  + GLib.Variant.keys: correctly raise TypeError for non-dict
    types.
  + GLib.Variant: implement __bool__ for maybe types.
  + cairo: Fix GValue converters in case of NULL.
  + setup.py: Print an install command hint when pkg-config is
    missing.
  + pygi-info: wrap g_union_info_get_alignment().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550145600">- Update to version 3.31.3:
  + Speed up destruction of boxed types and
    GObject.Value.set_value() calls. This makes appending to a
    Gtk.TreeModel nearly twice as fast for example.
  + Allow passing None for boolean parameters.
  + meson: Install .egg-info directory to arch'd dir.
  + gtk overrides: raise in case Gtk.Window is instantiated after
    gtk_init failed.
  + gio overrides: Warn when creating various dbus types without a
    constructor.
  + tests:
  - Fix tests with glib 2.59.x.
  - Fix test_atoms failing in some environments.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551960000">- Update to version 3.31.4:
  + docs: document GObject.Object.weak_ref().
  + cairo:
  - Add cairo pattern foreign struct support.
  - Add cairo_matrix_t converter to GValue.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
</package>
<package pkgid="977f9226e89082452d75865c88acebe648e44a53dd2ccabc4b167db1c0daebc4" name="python3-idna" arch="noarch">
  <version epoch="0" ver="2.6" rel="1.20"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
</package>
<package pkgid="4c46dfd17528d55fac416488446727e36ee9f18613f232f93fb4b22e285287db" name="python3-ipaddr" arch="noarch">
  <version epoch="0" ver="2.1.11" rel="2.24"/>
  <changelog author="klaussfreire@users.sourceforge.net" date="1310126400">- Initial package, upstream ipaddr 2.1.9</changelog>
  <changelog author="saschpe@suse.de" date="1316692800">- Re-generated spec file with py2pack
- Run testsuite (using python-nose)
- Fix non-executable script rpmlint warning</changelog>
  <changelog author="klaussfreire@users.sourceforge.net" date="1321444800">- Fix license file to have proper attribution
  (upstream issue 90)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1327233600">Update to upstream ipaddr 2.1.10
- i84, fix iterhosts for /31's or /127's
- private method arg cleanup.
- i83, docstring issue.
- i87, new ipv4/ipv6 parser. patch from pmarks
- i90, fix copyright.
- bytes fix. patch from pmarks.-</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1427284800">Update to upstream ipaddr 2.1.11
- hostmask parsing bug fixed by pmarks (a nearly complete rewrite of the mask parsing code)
- i97, incorrectly parses some v6 addresses.
- docstring typos.
- i95, refer to the nets in the exception raised by collapse_address_list
- add license to boilerplate to test-2to3.sh</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="toddrme2178@gmail.com" date="1504180800">- Add use_2to3.patch
  * Allows setup.py to automatically convert code with 2to3 instead
    of having to do it manually.</changelog>
</package>
<package pkgid="5517d282d12a58d3806393fc03a163886ccc4d55761b9ca4ebd49ed6a50aab39" name="python3-libvirt-python" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="1.3"/>
  <changelog author="jfehlig@suse.com" date="1580990400">- Stop building for python2
  Dropped patches: revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1598356800">- Update to 6.6.0
  - Add all new APIs and constants in libvirt 6.6.0
  - jsc#SLE-14253</changelog>
  <changelog author="jfehlig@suse.com" date="1598961600">- Update to 6.7.0
  - Add all new APIs and constants in libvirt 6.7.0
  - jsc#SLE-14253, jsc#SLE-15159</changelog>
  <changelog author="jfehlig@suse.com" date="1601553600">- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- fix constructor param name for virDomain{Checkpoint,Snapshot}
  61341150-fix-constructor-param-name.patch
  boo#1177559</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib in
  order to support multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66
- Enable test suite. It is mandatory for python packages and
  upstream's next major version update will have more tests.</changelog>
  <changelog author="jfehlig@suse.com" date="1604318400">- Update to 6.9.0
  - Add all new APIs and constants in libvirt 6.9.0
  - jsc#SLE-13688, jsc#SLE-16754
  - Dropped patches:
    61341150-fix-constructor-param-name.patch
- Add new file _service for tar_scm source service
- Remove signature file and python-libvirt-python.keyring</changelog>
  <changelog author="jfehlig@suse.com" date="1606910400">- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688</changelog>
  <changelog author="jfehlig@suse.com" date="1611057600">- Update to 7.0.0
  - Add all new APIs and constants in libvirt 7.0.0
  - jsc#SLE-15860</changelog>
  <changelog author="jfehlig@suse.com" date="1614686400">- Update to 7.1.0
  - Add all new APIs and constants in libvirt 7.1.0</changelog>
</package>
<package pkgid="5b6d51933d3209cbb57a4f504ef33145e46947f4ab82627515e326b68a998113" name="python3-libxml2-python" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.40.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646136000">- Security fix: [bsc#1196490, CVE-2022-23308]
  * Use-after-free of ID and IDREF attributes.
- Add libxml2-CVE-2022-23308.patch</changelog>
</package>
<package pkgid="6ee257df14127a8bc765f5a5a427555e4c4b347c5640d02926d2f3fe4dce7f29" name="python3-msgpack" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="1.19"/>
  <changelog author="mc@suse.com" date="1445083200">- build conditionally without tests</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.4.8</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Implement single-spec version.</changelog>
  <changelog author="dmueller@suse.com" date="1517054400">- update to 0.5.1:
  * Package name on PyPI was changed to msgpack from 0.5.
- rename from msgpack-python</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Strip rheotrics from descriptions.</changelog>
  <changelog author="tbechtold@suse.com" date="1517918400">- update to version 0.5.4
  * packer: Use PyUnicode_AsUTF8AndSize() for utf-8 (#272)
  * Fix encoding and unicode_errors (#277)
  * Undeprecate unicode_errors (#278)
  * Packer.pack() reset buffer on exception (#274)
  * Use cython's cast for converting encoding and errors (#279)
  * 0.5.4
  * Add raw_as_bytes option to Unpacker. (#265)
  * s/raw_as_bytes/raw/g (#276)</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- fix typo in obsoletes</changelog>
  <changelog author="alarrosa@suse.com" date="1519646400">- Provide also python-msgpack-python in the python2 package to
  be able to obsolete the python2-msgpack-python package correctly.</changelog>
  <changelog author="alarrosa@suse.com" date="1519905600">- Update to version 0.5.6 (boo#1123558)
  * Fix fallback.Unpacker.feed() dropped unused data from buffer
  * Resurrect fallback.unpack() and _unpacker.unpack(). They were
    removed at 0.5.5 but it breaks backward compatibility.
- Update to version 0.5.5
  * Fix memory leak in pure Python Unpacker.feed()
  * Fix unpack() didn't support raw option</changelog>
  <changelog author="alarrosa@suse.com" date="1548763200">- Use %license</changelog>
</package>
<package pkgid="69077e77a652ca78f3a02314a35f3212d674f04f7a54605d6ba5307f305b3067" name="python3-networkx" arch="noarch">
  <version epoch="0" ver="2.0" rel="3.2.8"/>
  <changelog author="toddrme2178@gmail.com" date="1414152000">- Add python-decorator in requires to buildrequires</changelog>
  <changelog author="tbechtold@suse.com" date="1414670400">- update to version 1.9.1:
  * Bugfix release for minor installation and documentation issues
- Don't BuildRequire/Recommend matplotlib and scipy on SLE11
  and SLE12. Both are not available there.</changelog>
  <changelog author="tbechtold@suse.com" date="1430308800">- Don't BuildRequires python-pygraphviz. It's not needed.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1437825600">- fix rhel build by conditionalizing "Recommends:" tags
- do not hardcode /usr/share/doc/packages but use %_docdir</changelog>
  <changelog author="tbechtold@suse.com" date="1441800000">- update to 1.10:
  * connected_components, weakly_connected_components, and
    strongly_connected_components return now a generator of
    sets of nodes. Previously the generator was of lists of
    nodes. This PR also refactored the connected_components
    and weakly_connected_components implementations making them
    faster, especially for large graphs.
  * The func_iter functions in Di/Multi/Graphs classes are slated
    for removal in NetworkX 2.0 release. func will behave like func_iter
    and return an iterator instead of list. These functions are deprecated
    in NetworkX 1.10 release.
  * A enumerate_all_cliques function is added in the clique package
    (networkx.algorithms.clique) for enumerating all cliques
    (including nonmaximal ones) of undirected graphs.
  * A coloring package (networkx.algorithms.coloring) is created for graph
    coloring algorithms. Initially, a greedy_color function is provided
    for coloring graphs using various greedy heuristics.
  * A new generator edge_dfs, added to networkx.algorithms.traversal, implements
    a depth-first traversal of the edges in a graph. This complements
    functionality provided by a depth-first traversal of the nodes in
    a graph. For multigraphs, it allows the user to know precisely which
    edges were followed in a traversal. All NetworkX graph types are
    supported. A traversal can also reverse edge orientations or ignore them.
  * A find_cycle function is added to the networkx.algorithms.cycles package
    to find a cycle in a graph. Edge orientations can be optionally
    reversed or ignored.
  * Add a random generator for the duplication-divergence model.
  * A new networkx.algorithms.dominance package is added for dominance/dominator
    algorithms on directed graphs. It contains a immediate_dominators
    function for computing immediate dominators/dominator trees and a
    dominance_frontiers function for computing dominance frontiers.
  * The GML reader/parser and writer/generator are rewritten to remove
    the dependence on pyparsing and enable handling of arbitrary graph data.
  * The network simplex method in the networkx.algorithms.flow package is
    rewritten to improve its performance and support multi- and disconnected
    networks. For some cases, the new implementation is two or three orders
    of magnitude faster than the old implementation.
  * Added the Margulis--Gabber--Galil graph to networkx.generators.
  * Added the chordal p-cycle graph, a mildly explicit algebraic construction of
    a family of 3-regular expander graphs. Also, moves both the existing
    expander graph generator function (for the Margulis-Gabber-Galil expander)
    and the new chordal cycle graph function to a new module,
    networkx.generators.expanders.
  * Allow overwriting of base class dict with dict-like: OrderedGraph, ThinGraph,
    LogGraph, etc.
  * Added to_pandas_dataframe and from_pandas_dataframe.
  * Added the Hopcroft--Karp algorithm for finding a maximum cardinality
    matching in bipartite graphs.
  * Expanded data keyword in G.edges and added default keyword.
  * Added support for finding optimum branchings and arborescences.
  * Added a from_pandas_dataframe function that accepts Pandas DataFrames
    and returns a new graph object. At a minimum, the DataFrame must have two
    columns, which define the nodes that make up an edge. However, the function
    can also process an arbitrary number of additional columns as edge
    attributes, such as 'weight'.
  * Expanded layout functions to add flexibility for drawing subsets of nodes
    with distinct layouts and for centering each layout around given coordinates.
  * Added ordered variants of default graph class.
  * Added harmonic centrality to network.algorithms.centrality.
  * The generators.bipartite have been moved to algorithms.bipartite.generators.
    The functions are not imported in the main namespace, so to use it,
    the bipartite package has to be imported.
  * Added Kanevsky's algorithm for finding all minimum-size separating node
    sets in an undirected graph. It is implemented as a generator of node
    cut sets.
  * Added power function for simple graphs
  * Added fast approximation for node connectivity based on White and Newman's
    approximation algorithm for finding node independent paths between two nodes.
  * Added transitive closure and antichains function for directed acyclic graphs
    in algorithms.dag. The antichains function was contributed by Peter Jipsen
    and Franco Saliola and originally developed for the SAGE project.
  * Added generator function for the complete multipartite graph.
  * Added nonisomorphic trees generator.
  * Added a generator function for circulant graphs to the
    networkx.generators.classic module.
  * Added function for computing quotient graphs; also created a new module,
    networkx.algorithms.minors.
  * Added longest_path and longest_path_length for DAG.
  * Added node and edge contraction functions to networkx.algorithms.minors.
  * Added a new modularity matrix module to networkx.linalg, and associated
    spectrum functions to the networkx.linalg.spectrum module.
  * Added function to generate all simple paths starting with the shortest ones
    based on Yen's algorithm for finding k shortest paths at
    algorithms.simple_paths.
  * Added the directed modularity matrix to the
    networkx.linalg.modularity_matrix module.
  * Adds triadic_census function; also creates a new module,
    networkx.algorithms.triads.
  * Adds functions for testing if a graph has weighted or negatively weighted
    edges. Also adds a function for testing if a graph is empty. These are
    is_weighted, is_negatively_weighted, and is_empty.
  * Added Johnson's algorithm; one more algorithm for shortest paths. It solves
    all pairs shortest path problem. This is johnson at
    algorithms.shortest_paths
  * Added Moody and White algorithm for identifying k_components in a graph,
    which is based on Kanevsky's algorithm for finding all minimum-size node
    cut-sets (implemented in all_node_cuts #1391).
  * Added fast approximation for k_components to the
    networkx.approximation package. This is based on White and Newman
    approximation algorithm for finding node independent paths between two
    nodes (see #1405).
  * The legacy ford_fulkerson maximum flow function is removed.
    Use edmonds_karp instead.
  * Support for Python 2.6 is dropped.</changelog>
  <changelog author="dmueller@suse.com" date="1457870400">- add license/readme</changelog>
  <changelog author="tbechtold@suse.com" date="1471435200">update to version networkx-1.11
  * Update release and news info for v1.10.1
  * Use utils.testing to handle testing edge and node equality
  * Update news to include 1.10 release highlights
  * Remove spurious line due to typo.
  * Fix algebraicconnectivity float conversion
  * Fix python3 numpy wont read in {}.values to array.
  * update requirements.txt on v1.11 branch
  * update doc/requirements.txt to point Sphinx-origin_stable
  * Update license, readme, and release.py for networkx-1.11
  * adjust tutorial to mention import write_dot
  * Revert some API changes in layout.py due to bugs.
  * Update news and api for v1.11
  * Update authors, copyrights and EOL space
  * Add release date in news
  * Add tests, convert center to np.array, fix domain_size
  * Put graphviz install outside check for python2.7
  * Activate Appveyor-CI
  * Add layout tests and minor docs
  * networkx-1.11rc2 label
  * Remove all the symbolic links from the 'examples/' directory
  * v1.11 Add utils functions to flow variable __all__
  * Fix Sphinx for v1.11
  * Prepare release number and news.rst for v1.11
  * simplify pydot imports, use testing.utils routines
  * Get the month right.
  * update release docs files for v1.11
  * Use pydotplus for all supported python versions
  * Add note about pyggraphviz and pydotplus import changes
  * Modified release.py
  * change copyright year in doc build
  * For v1.11 drop support for python3.2 and add 3.5
  * Update news.rst for v1.11
  * Examples and doc changes
  * Re-add scaling inside fruchterman_reingold
  * Update conf.py to point to make_examples_rst.py
  * Reinstate v1.10 layout except center. Fix bugs
  * Adjust imports in drawing layouts with graphviz
  * Doc tweak on edges for v1.11</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494504000">- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Fix shebangs</changelog>
  <changelog author="arun@gmx.de" date="1509451200">- specfile:
  * changes from tar.gz to zip
  * updated sed
  * INSTALL doesn't seem to be packaged anymore, deleted "rm" command
- update to version 2.0:
  * Highlights
    + This release is the result of over two years of work with 1212
    commits and 193 merges by 86 contributors. Highlights include:
    + We have made major changes to the methods in the Multi/Di/Graph
    classes. There is a migration guide for people moving from 1.X
    to 2.0.
    + We updated the documentation system.
  * full release notes at
    https://networkx.github.io/documentation/stable/release/release_2.0.html</changelog>
</package>
<package pkgid="11209d08833896b14416365858dbfde80222680a79be04efef0e64f8f8c33173" name="python3-nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="1.7"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
</package>
<package pkgid="9af6bb28b80e02519c351613a58805fe62e3e6c64882b9411f0fb08fe9bd04be" name="python3-packaging" arch="noarch">
  <version epoch="0" ver="20.3" rel="1.9"/>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 19.1:
  * Add the ``packaging.tags`` module.
  * Correctly handle two-digit versions in ``python_version``</changelog>
  <changelog author="dcermak@suse.com" date="1565265600">- Add Requires:python-attrs as this is a new dependency
  this fixes bsc#1144506</changelog>
  <changelog author="dcermak@suse.com" date="1565265601">- Enable tests via _multibuild
  Add patches from https://github.com/pypa/packaging/pull/176:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  (these fix the tests on non-x86 platforms and can be dropped on the next
  release)</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Fix a bit the multibuild conversion
- Remove the attrs from the deps as they are no longer needed</changelog>
  <changelog author="dcermak@suse.com" date="1566216000">- Remove dependency on attrs
  Add: 0005-Drop-dependency-on-attrs.patch
  this fixes bsc#1144506</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 19.2:
  * Many buildsystem tweaks to accomodate for distribution shipping
- Remove all the merged patches:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  * 0005-Drop-dependency-on-attrs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580904000">- Update to 20.1
  * Fix a bug caused by reuse of an exhausted iterator.
  * Add type hints
  * Add proper trove classifiers for PyPy support
  * Scale back depending on ctypes for manylinux support detection
  * Use sys.implementation.name where appropriate for packaging.tags
  * Expand upon the API provded by packaging.tags
  * Officially support Python 3.8
  * Add major, minor, and micro aliases to packaging.version.Version
  * Properly mark packaging has being fully typed by adding a py.typed file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581336000">- add issue_254.patch to fix tests under non-x86_64 pplatforms</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- Update to 20.3
  * Fix a bug that caused a 32-bit OS that runs on a 64-bit ARM CPU
    (e.g. ARM-v8, aarch64), to report the wrong bitness.
- Drop already upstreamed patch issue_254.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1588680000">- Ignore clamav scan as it bogusly calls one file to be infected
  while it is just a testcase of malformed binary:
  [#]!BuildIgnore: post-build-checks-malwarescan</changelog>
</package>
<package pkgid="2f34749e9c7397cffa5ffa89fe82ca2bde240502f219853f4f798008c6cd0caf" name="python3-policycoreutils" arch="noarch">
  <version epoch="0" ver="3.1" rel="150300.4.2"/>
  <changelog author="jsegitz@suse.de" date="1582804800">- Ship working pam config for newrole (bsc#1163020)
- Recommend policycoreutils-devel to have perm_map file available</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * fixfiles: Fix "verify" option
  * fixfiles: Fix [-B] [-F] onboot
  * fixfiles: Force full relabel when SELinux is disabled
  * semodule: Enable CIL logging
  * semanage: Add support for DCCP and SCTP protocols
  * semanage: Do not use default s0 range in "semanage login -a"
  * semanage: Document DCCP and SCTP support
  * semanage: Improve handling of "permissive" statements
  * semanage: fix moduleRecords.customized()
  Refreshed chcat_join.patch</changelog>
  <changelog author="jsegitz@suse.de" date="1583755200">- Dropped Recommends: for %{name}-lang and %{name}-devel. Not
  allowed by openSUSE guidelines</changelog>
  <changelog author="jsegitz@suse.de" date="1590753600">- Move pp binary to libexec directory instead of lib</changelog>
  <changelog author="dimstar@opensuse.org" date="1591272000">- Pass the right value for LIBEXECDIR to make / make install
  instead of trying to move the file around post install. This
  caters for the planned change of libexecdir to change from
  /usr/lib to /usr/libexec by injecting the right value no matter
  what.</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * New `setfiles -E` option - treat conflicting specifications as errors, such
    as where two hardlinks for the same inode have different contexts.
  * `setsebool -V` reports errors from commit phase
  * matchpathcon related interfaces are deprecated
  * New `restorecon -x` option which prevents it from crossing file system
  * boundaries.
  * `sepolgen-ifgen` parses a gen_tunable statement as bool
  * Removed Requires for python3-ipy as the ipaddress module is used. No
    requires for python-ipaddress as it's assumed this is used only on recent
    systems
  * Drop chcat_join.patch, is upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1594987200">- Proper default permissions for newrole (4755)</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- Align more with Fedora spec file to get rid of python dependencies
  in the core system
  - create new python-utils sub-package
  - move some tools to devel sub-package
- Cleanup dependencies</changelog>
  <changelog author="jsegitz@suse.com" date="1599739200">- Add get_os_version.patch
  get_os_version is implemented in a very RH/Fedora specific way.
  Ensure that it returns a valid string for SUSE by changing the
  default. Also remove the RH specific logic when generating HTML
  versions of the SELinux documentation</changelog>
  <changelog author="jsegitz@suse.com" date="1637841600">- Add run_init.pamd.patch to adjust to SUSE pam setup. Removed
  run_init_use_pam_keyinit.patch and included it in the new patch
  (bsc#1190098)</changelog>
</package>
<package pkgid="0e60c38bdec6f6414759cf8336194d6c4e392b854348478b0c3c69f55db00a42" name="python3-psutil" arch="x86_64">
  <version epoch="0" ver="5.8.0" rel="1.10"/>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Micha? Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
</package>
<package pkgid="31ddc63bc7178278d7d72abe6bdeb2a97c486cdd56234292f56a0fa1a562c324" name="python3-py" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="08ae6e77c661b45cf5995059f2a089bb55df83564689419f2a9e2a36256fc5d6" name="python3-pyOpenSSL" arch="noarch">
  <version epoch="0" ver="19.0.0" rel="1.31"/>
  <changelog author="vcizek@suse.com" date="1538740800">- OpenSSL changed X509_STORE_add_cert in 1.1.0i such that it no longer
  raises an error if a duplicate cert is added (bsc#1110435)
  * https://github.com/pyca/pyopenssl/pull/787
  * add X509_STORE_add_cert.patch</changelog>
  <changelog author="mcepl@suse.com" date="1540900800">- Add patch fix_test_suite.patch to allow test suite to pass with
  OpenSSL 1.1.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1540900801">- Add patch to fix issues with openssl 1.1.1:
  * openssl-1.1.1.patch
- Drop the downstream fix_test_suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1540900802">- handle that renegotiation is forbidden in TLS 1.3
  * add tls13-renegotiation.patch</changelog>
  <changelog author="hpj@urpla.net" date="1549108800">- add local-intersphinx-inventories.patch for generating the docs
  correctly
- add fetch-intersphinx-inventories.sh to fetch the inventories</changelog>
  <changelog author="toddrme2178@gmail.com" date="1551096000">- Add fetch-intersphinx-inventories.sh to sources</changelog>
  <changelog author="hpj@urpla.net" date="1551441600">- remove everything to build docs:
  - local-intersphinx-inventories.patch
  - fetch-intersphinx-inventories.sh
  - python3.inv
  - crypto.inv</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551528000">- update to 19.0
- fixed build deps.
- drop patches: openssl-1.1.0i.patch
    openssl-1.1.1.patch
    opensuse_ca.patch
    tls13-renegotiation.patch
  * X509Store.add_cert no longer raises an error if you add a duplicate cert.
  * pyOpenSSL now works with OpenSSL 1.1.1.
  * pyOpenSSL now handles NUL bytes in X509Name.get_components()</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k "not test_export_text"</changelog>
  <changelog author="bwiedemann@suse.com" date="1566475200">- Add fix-compilation-2020.patch to fix tests after 2020</changelog>
</package>
<package pkgid="7f6eb17cb43c45c50fbf28fb39fa3860b0f30857ee6a81a571984f9a974ccedf" name="python3-pyasn1" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="3.2.1"/>
  <changelog author="tbechtold@suse.com" date="1489665600">- Switch to singlespec approach</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cleanup duplicates with fdupes</changelog>
  <changelog author="michael@stroeder.com" date="1501329600">- updated to upstream release 0.3.1
- do not ship doc/source/
  Revision 0.3.1, released 26-07-2017
- ASN.1 types __init__(), .clone() and .subtype() signatures
  refactored into keyword arguments to simplify their signatures.
- ASN.1 types initialization refactored to minimize the use of
  relatively expensive isNoValue() call
- Lazily pre-populate list of values of Sequence/Set/Choice types
- NamedTypes comparison made more efficient
- More efficient constraints computation and code clean up
- The __getitem__() implementation of some ASN.1 types &amp; tag object
  refactored for better performance
- BER/CER/DER value encoders refactored to produce either tuple of
  bytes or octet-stream depending on what is more optimal
- Reduced the frequency of expensive isinstance() calls
- Tag-related classes optimized, refactored into properties and
  documented.
- The NamedValues implementation refactored to mimic Python dict, its use
  in ASN.1 types refactored into properties and better documented.
  WARNING: this change introduces a deviation from original API.
- NamedType family of classes overhauled, optimized and documented.
- The `componentType` attribute of constructed ASN.1 types turned
  read-only on instances.
- Sequence/Set DER/CER/DER decoder optimized to skip the case of
  reordered components handling when not necessary.
- Tags and constraints-related getter methods refactored into read-only
  instance attributes.
- The .hasValue() method refactored into .isValue property. All ASN.1
  objects now support them, not just scalars.
- The Real.{isInfinity, isPlusInfinity, isMinusInfinity} methods
  refactored into properties and renamed into IsInf, IsPlusInf and isMinusInf
- The end-of-octets type refactored to ensure it is a singleton. Codecs
  changed to rely on that for better performance.
- Codecs lookup made more efficient at BER/CER/DER decoder main loop by
  assigning `typeId` to every ASN.1 type, not just ambiguous ones.
- The .getComponent*() methods of constructed ASN.1 types changed
  to lazily instantiate underlying type rather than return `None`.
  This should simplify its API as initialization like `X[0][1] = 2` becomes
  possible.
  WARNING: this change introduces a deviation from the original API.
- The .setComponent*() methods of SetOf/SequenceOf types changed not
  to allow uninitialized "holes" inside the sequences of their components.
  They now behave similarly to Python lists.
  WARNING: this change introduces a deviation from the original API.
- Default and optional components en/decoding of Constructed type
  refactored towards better efficiency and more control.
- OctetsString and Any decoder optimized to avoid creating ASN.1
  objects for chunks of substrate. Instead they now join substrate
  chunks together and create ASN.1 object from it just once.
- The GeneralizedTime and UTCTime types now support to/from Python
  datetime object conversion.
- Unit tests added for the `compat` sub-package.
- Fixed BitString named bits initialization bug.
- Fixed non-functional tag cache (when running Python 2) at DER decoder.
- Fixed chunked encoding restriction on DER encoder.
- Fixed SET components ordering at DER encoder.
- Fixed BIT STRING &amp; OCTET STRING encoding to be always non-chunked (e.g.
  primitive) at DER encoder
- Fixed `compat.integer.from_bytes()` behaviour on empty input.</changelog>
  <changelog author="michael@stroeder.com" date="1502798400">- updated to upstream release 0.3.2
  Revision 0.3.2, released 04-08-2017
- Fixed SequenceOf/SetOf types initialization syntax to remain
  backward compatible with pyasn1 0.2.*
- Rectified thread safety issues by moving lazy, run-time computation
  into object initializer.
- Fixed .isValue property to return True for empty SetOf/SequenceOf
  objects
- Fixed GeneralizedTime/UTCTime CER/DER codecs to actually get invoked
- Fixed DER/CER encoders handling optional SEQUENCE/SET fields containing
  nested SEQUENCE/SET with optional fields.
- Fixed crash in SequenceOf/SetOf pretty printing and decoding (in some
  cases)
- Fixed documentation markup issues.</changelog>
  <changelog author="michael@stroeder.com" date="1504785600">- updated to upstream release 0.3.4
  Revision 0.3.4, released 07-09-2017
- Fixed Native encoder to handle SEQUENCE/SET objects without
  the componentType property
- Added missing component-less SEQUENCE/SET objects dict duck-typing support
- Fixed unnecessary duplicate tags detection at NamesType.tagMap
- Fixed crash at SEQUENCE and SEQUENCE OF CER encoder when running
  in schemaless mode
- Fixed Character types instantiation from OctetString type -- double
  unicode decoding may have scrambled the data
  Revision 0.3.3, released 27-08-2017
- Improved ASN.1 types instantiation performance
- Improved BER/CER/DER decoder performance by not unconditionally casting
  substrate into str/bytes.
- Fixed exponential index size growth bug when building ambiguous
  NamedTypes tree
- Fixed constructed types decoding failure at BER codec if running
  in schema-less mode
- Fixed crash on prettyPrint'ing a SEQUENCE with no defined components
- Fixed SetOf ordering at CER/DER encoder
- Fixed crash on conditional binascii module import
- Fix to TagSet hash value build</changelog>
  <changelog author="michael@stroeder.com" date="1505822400">- updated to upstream release 0.3.5
  - Codecs signatures unified and pass the options kwargs through the
    call chain
  - Explicit tag encoding optimized to avoid unnecessary copying
  - End-of-octets sentinel encoding optimized
  - Refactored ASN.1 codecs properties to silently enforce proper
    length and chunk size encoding modes
  - Fixed DER encoder to always produce primitive encoding
  - Fixed crash at SequenceOf native decoder
  - Fixed Real.prettyPrint() to fail gracefully on overflow
  - Fixed a couple of crashes when debug mode is enabled</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- updated to upstream release 0.3.6
  * End-of-octets encoding optimized at ASN.1 encoders
  * The __getitem__/__setitem__ behavior of Set/Sequence and
    SetOf/SequenceOf objects aligned with the canonical Mapping
    and Sequence protocols in part
  * Fixed crash in ASN.1 encoder when encoding an explicitly tagged
    component of a Sequence</changelog>
  <changelog author="michael@stroeder.com" date="1507809600">- updated to upstream release 0.3.7
  * Fixed ASN.1 time types pickling/deepcopy'ing</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 0.4.2:
  * Fixed explicit tag splitting in chunked encoding mode at
    OctetString and BitString encoders
- changes from version 0.4.1:
  * ANY DEFINED BY clause support implemented
  * Encoders refactored to take either a value (as ASN.1 object) or a
    Python value plus ASN.1 schema
  * BitString decoder optimised for better performance when running on
    constructed encoding
  * Constructed types' .getComponentBy*() methods accept the `default`
    parameter to return instead if schema object is to be returned
  * Constructed types' .getComponentBy*() methods accept the
    `instantiate` parameter to disable automatic inner component
    instantiation
  * The ASN.1 types' `__repr__` implementation reworked for better
    readability at the cost of not being `eval`-compliant
  * Most ASN.1 types' `__str__` magic methods (except for OctetString
    and character types) reworked to call `.prettyPrint()` rather than
    `.prettyPrint` calling `__str__` as it was before. The intention
    is to eventually deprecate `.prettyPrint()` in favor of `str()`.
    The other related change is that `str()` of enumerations and
    boolean types will return string label instead of number.
  * Fixed Choice.clear() to fully reset internal state of the object
  * Sphinx documentation rearranged, simplified and reworded
  * The `isValue` singleton is now the only way to indicate ASN.1
    schema as opposed to ASN.1 schema instance. The legacy `None`
    initializer support has been removed.
  * Changed `Null` object initialization behaviour: previous default
    value (`''`) is not set anymore. Thus `Null()` call produces a
    ASN.1 schema object, while `Null('')` - value object.
  * Migrated all docs and references from SourceForge
  * Imports PEP8'ed
  * Fixed ASN.1 encoder not to omit empty substrate produced for inner
    component if the inner component belongs to the simple class (as
    opposed to constructed class)
  * Fixed CER/DER encoders to respect tagged CHOICE when ordering SET
    components
  * Fixed ASN.1 types not to interfere with the Pickle protocol
  * Fixed Sequence/SequenceOf types decoding heuristics in schema-less
    decoding mode</changelog>
</package>
<package pkgid="53fa6a3b6239b05ef5153cb586ee5c865f63bc22f6ae61cd091e8ee98e71b0b3" name="python3-pycparser" arch="noarch">
  <version epoch="0" ver="2.17" rel="3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1361966400">- Initial python3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1365854400">- Remove pre_checkin.sh since the two packages are not the same</changelog>
  <changelog author="speilicke@suse.com" date="1376308800">- Update to version 2.10:
  - A number of improvements in the handling of typedef-name ambiguities,
    contributed by Sye van der Veen in GitHub issue #1:
  * Allow shadowing of types by identifiers in inner scopes.
  * Allow struct field names to reside in a separate namespace and have
    the same names as types.
  * Allow duplicate typedefs in some cases to mimic real compiler behavior.
  - c_generator error for ExprList in expression context.
  - Assume default int type for functions whose argument or return types were
    not specified.
  - Relax the lexer a bit w.r.t. some integer suffixes and $ in identifier names
    (which is supported by some other compilers).
- Package LICENSE</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 2.12:
  * This is a fix release for 2.11; the memory optimization with
    __slots__ on Coord and AST nodes didn't take weakrefs into
    account, which broke cffi and its many dependents (issue #76).
    Fixed by adding __weakref__ to __slots__.
- additional changes from version 2.11:
  * Add support for C99 6.5.3.7 p7 - qualifiers within array
    dimensions in function declarations. Started with issue #21
    (reported with initial patch by Robin Martinjak).
  * Issue #27: bug in handling of unified wstring literals.
  * Issue #28: fix coord reporting for 'for' loops.
  * Added ``examples/using_gcc_E_libc.py`` to demonstrate how ``gcc
  - E`` can be used instead of ``cpp`` for preprocessing.
  * Pull request #64: support keywords like const, volatile,
    restrict and static in dimensions in array declarations.
  * Reduce memory usage of AST nodes (issue #72).
  * Parsing order of nested pointer declarations fixed (issue #68).
- update project URL
- fix end of line encoding of LICENSE</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1448884800">- Update to version 2.14
  * Added CParser parameter to specify output directory for generated parsing
    tables (#84).
  * Removed lcc's cpp and its license from the distribution. Using lcc's cpp
    is no longer recommended, now that Clang has binary builds available for
    Windows.
  2.13:
  * Added support for offsetof() the way gcc implements it (special builtin
    that takes a type as an argument).
  * Added faked va_* macros (these are expected to come from stdarg.h)
  * Added a bunch more fake headers and typedefs to support parsing C projects
    like Git and SQLite without modifications to pycparser.
  * Added support for empty initializer lists (#79).
- Package fake_libc_include
  * switch to github release as pypi tarball don't contains all files
- Add 0002-Add-missing-typedef-sa_family_t-from-sys-socket.h.patch
  * upstream patch enhancing the fake_libc_include</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1452168000">- Tag added patch better</changelog>
  <changelog author="p.drouand@gmail.com" date="1452945600">- Add python-pycparser-rpmlintrc to sources</changelog>
  <changelog author="jmatejek@suse.com" date="1481198400">- update for multipython build
- move fake_libc to site-packages, where it can be found by pkg_resources
  * this also prevents file conflict between python2 and python3
- fix-lexer-build.patch: fix build process to better generate parser/lexer
  files</changelog>
  <changelog author="jmatejek@suse.com" date="1489665600">- update to 2.17
  - PR #121: Update bundled PLY version to 3.8
  - Issue #117: Fix parsing of extra semi-colons inside structure declarations.
  - PR #109: Update c_generator to add {} around nested named initializers.
  - PR #101: Added support for parsing pragmas into the AST.
  - Additional fake headers and typedefs, manifest fixes (#97, #106, #111).
  - Testing with Python 3.5 instead of 3.3 now (3.4 and 3.5 are the 3.x versions
    tested).
  - PR #145: More complete support for offsetof()
  - Issue #116: Fix line numbers recorded for empty and compound statements.
  - Minor performance improvement to the invalid string literal regex.
- drop upstreamed 0002-Add-missing-typedef-sa_family_t-from-sys-socket.h.patch
- move source url to pypi</changelog>
  <changelog author="jmatejek@suse.com" date="1490356800">- sort out duplicate rpmlintrc</changelog>
</package>
<package pkgid="3f87d23b4513a67ed75152d648cdddb35dd45ee7ceb9c77826718375635224f5" name="python3-pycurl" arch="x86_64">
  <version epoch="0" ver="7.43.0.2" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1517572800">- Disable tests on arm platforms as they are very flaky there,
  on multiple runs always different failures</changelog>
  <changelog author="mcepl@suse.com" date="1531224000">- Update to 7.43.0.2:
  * Added perform_rb and perform_rs methods to Curl objects to
    return response body as byte string and string, respectively.
  * Added OPT_COOKIELIST constant for consistency with other
    option constants.
  * PycURL is now able to report errors triggered by libcurl
    via CURLOPT_FAILONERROR mechanism when the error messages are
    not decodable in Python's default encoding (GitHub issue #259).
  * Added getinfo_raw method to Curl objects to return byte strings
    as is from libcurl without attempting to decode them
    (GitHub issue #493).
  * When adding a Curl easy object to CurlMulti via add_handle,
    the easy objects now have their reference counts increased so that
    the application is no longer required to keep references to them
    to keep them from being garbage collected (GitHub issue #171).
  * PycURL easy, multi and share objects can now be weak referenced.
  * set_ca_certs now accepts byte strings as it should have been
    all along.
  * Use OpenSSL 1.1 and 1.0 specific APIs for controlling thread locks
    depending on OpenSSL version (patch by Vitaly Murashev).
  * Fixed a crash when closesocket callback failed (patch by
    Gisle Vanem and toddrme2178).
  * Added CURLOPT_PROXY_SSLCERT, CURLOPT_PROXY_SSLCERTTYPE,
    CURLOPT_PROXY_SSLKEY, CURLOPT_PROXY_SSLKEYTYPE,
    CURLOPT_PROXY_SSL_VERIFYPEER (libcurl 7.52.0+,
    patch by Casey Miller).
  * Added CURLOPT_PRE_PROXY (libcurl 7.52.0+, patch by ziggy).
  * Added SOCKET_BAD constant and it is now recognized as a valid
    return value from OPENSOCKET callback.</changelog>
  <changelog author="tchvatal@suse.com" date="1533816000">- Start excluding flaky tests</changelog>
  <changelog author="tchvatal@suse.com" date="1535544000">- Make sure we build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Add patch to match up Fedora on how we detect tls backend on runtime
  * python-pycurl-7.43.0-tls-backend.patch</changelog>
  <changelog author="mcepl@suse.com" date="1536235200">- Switch to multibuild, so that we don't need testing BuildRequires
  always.</changelog>
  <changelog author="vcizek@suse.com" date="1541160000">- Don't run tests that fail randomly or under load
  * add disable_randomly_failing_tests.patch</changelog>
  <changelog author="mcepl@suse.com" date="1545220800">- Add missing setuptools BR</changelog>
  <changelog author="alarrosa@suse.com" date="1549454400">- Set LANG to en_US.UTF8 to fix the tests</changelog>
  <changelog author="mcepl@suse.com" date="1551960000">- bsc#1128355: update to the Factory package to get multibuild and
  better working tests.
- Refreshed patch against the new minor release tarball:
  - pycurl-libssh.patch
- Added patches:
  - disable_randomly_failing_tests.patch
  - python-pycurl-7.43.0-tls-backend.patch (from
    https://src.fedoraproject.org/rpms/python-pycurl/blob/master/f/0002-python-pycurl-7.43.0-tls-backend.patch)</changelog>
</package>
<package pkgid="8b99d42c471487297be4379c0d12fe1ea060372e7a28f0a4eccc43bb698d2d53" name="python3-pyparsing" arch="noarch">
  <version epoch="0" ver="2.4.7" rel="1.24"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1546948800">- Update to version 2.3.0+git.1546912853.bf348d6:
  * Update CHANGES to include note on fixing issue #65; generalized the note about the decaf language example; added sample code from the statemachine examples.
  * Unit test to test fix for issue #65
  * Fix inconsistency between Keyword(caseless=True) and CaselessKeyword (issue #65)
  * Fix typo: 'chemcialFormulas.py' -&gt; 'chemicalFormulas.py'
  * Convert exception logging to use ParseException.explain()
  * Add experimental ParseException.explain() method, to return a multiline string showing the parse expressions leading to a parsing failure
  * Clean up CHANGES notes for new examples
  * Add document signoff and library book state examples;
  * Update statemachine demo code to Py3
  * Update Lucene grammar example, but remove from Travis-CI acceptance scripts</changelog>
  <changelog author="dimstar@opensuse.org" date="1547726400">- BuildIgnore python[23]-pyparsing: python-packaging requires it
  for some actions it could perform, but we don't make use of these
  here. Ignoring this dependency allows us to break open a
  BuildCycle.</changelog>
  <changelog author="tbechtold@suse.com" date="1554984000">- Do not BuildRequire python-unittest2 when no tests are executed.
  This breaks a build cycle for pyparsing-&gt;unittest2-&gt;traceback2-&gt;pbr-&gt;
  Pygments-&gt;pytest-&gt;setuptools_scm-&gt;packaging which needs pyparsing</changelog>
  <changelog author="mimi.vx@gmail.com" date="1555588800">- update to 2.4.0
- drop nose_to_unittest.patch
- drop _service
  * Adds a pyparsing.__compat__ object for specifying compatibility with
  future breaking changes.
  * Conditionalizes the API-breaking behavior, based on the value
  pyparsing.__compat__.collect_all_And_tokens.  By default, this value
  will be set to True, reflecting the new bugfixed behavior.
  * User code that is dependent on the pre-bugfix behavior can restore
  it by setting this value to False.
  * Updated unitTests.py and simple_unit_tests.py to be compatible with
  "python setup.py test".
  * Fixed bug in runTests handling '\n' literals in quoted strings.
  * Added tag_body attribute to the start tag expressions generated by
  makeHTMLTags, so that you can avoid using SkipTo to roll your own
  tag body expression:
  * indentedBlock failure handling was improved
  * Address Py2 incompatibility in simpleUnitTests, plus explain() and
  Forward str() cleanup
  * Fixed docstring with embedded '\w', which creates SyntaxWarnings in Py3.8.
  * Added example parser for rosettacode.org tutorial compiler.
  * Added example to show how an HTML table can be parsed into a
  collection of Python lists or dicts, one per row.
  * Updated SimpleSQL.py example to handle nested selects, reworked
  'where' expression to use infixNotation.
  * Added include_preprocessor.py, similar to macroExpander.py.
  * Examples using makeHTMLTags use new tag_body expression when
  retrieving a tag's body text.
  * Updated examples that are runnable as unit tests</changelog>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 2.4.2:
  - Updated the shorthand notation that has been added for repetition
    expressions: expr[min, max], with '...' valid as a min or max value
  - The defaults on all the `__diag__` switches have been set to False,
    to avoid getting alarming warnings. To use these diagnostics, set
    them to True after importing pyparsing.
  - Fixed bug introduced by the use of __getitem__ for repetition,
    overlooking Python's legacy implementation of iteration
    by sequentially calling __getitem__ with increasing numbers until
    getting an IndexError. Found during investigation of problem
    reported by murlock, merci!
  - Changed [...] to emit ZeroOrMore instead of OneOrMore.
  - Removed code that treats ParserElements like iterables.
  - Change all __diag__ switches to False.
- update to 2.4.1.1:
  - API change adding support for `expr[...]` - the original
    code in 2.4.1 incorrectly implemented this as OneOrMore.
    Code using this feature under this relase should explicitly
    use `expr[0, ...]` for ZeroOrMore and `expr[1, ...]` for
    OneOrMore. In 2.4.2 you will be able to write `expr[...]`
    equivalent to `ZeroOrMore(expr)`.
  - Bug if composing And, Or, MatchFirst, or Each expressions
    using an expression. This only affects code which uses
    explicit expression construction using the And, Or, etc.
    classes instead of using overloaded operators '+', '^', and
    so on. If constructing an And using a single expression,
    you may get an error that "cannot multiply ParserElement by
    0 or (0, 0)" or a Python `IndexError`.
  - Some newly-added `__diag__` switches are enabled by default,
    which may give rise to noisy user warnings for existing parsers.
- update to 2.4.1:
  - A new shorthand notation has been added for repetition
    expressions: expr[min, max], with '...' valid as a min
  - '...' can also be used as short hand for SkipTo when used
    in adding parse expressions to compose an And expression.
  - '...' can also be used as a "skip forward in case of error" expression
  - Improved exception messages to show what was actually found, not
    just what was expected.
  - Added diagnostic switches to help detect and warn about common
    parser construction mistakes, or enable additional parse
    debugging. Switches are attached to the pyparsing.__diag__
    namespace object
  - Added ParseResults.from_dict classmethod, to simplify creation
    of a ParseResults with results names using a dict, which may be nested.
    This makes it easy to add a sub-level of named items to the parsed
    tokens in a parse action.
  - Added asKeyword argument (default=False) to oneOf, to force
    keyword-style matching on the generated expressions.
  - ParserElement.runTests now accepts an optional 'file' argument to
    redirect test output to a file-like object (such as a StringIO,
    or opened file). Default is to write to sys.stdout.
  - conditionAsParseAction is a helper method for constructing a
    parse action method from a predicate function that simply
    returns a boolean result. Useful for those places where a
    predicate cannot be added using addCondition, but must be
    converted to a parse action (such as in infixNotation). May be
    used as a decorator if default message and exception types
    can be used. See ParserElement.addCondition for more details
    about the expected signature and behavior for predicate condition
    methods.
  - While investigating issue #93, I found that Or and
    addCondition could interact to select an alternative that
    is not the longest match. This is because Or first checks
    all alternatives for matches without running attached
    parse actions or conditions, orders by longest match, and
    then rechecks for matches with conditions and parse actions.
    Some expressions, when checking with conditions, may end
    up matching on a shorter token list than originally matched,
    but would be selected because of its original priority.
    This matching code has been expanded to do more extensive
    searching for matches when a second-pass check matches a
    smaller list than in the first pass.
  - Fixed issue #87, a regression in indented block.
    Reported by Renz Bagaporo, who submitted a very nice repro
    example, which makes the bug-fixing process a lot easier,
    thanks!
  - Fixed MemoryError issue #85 and #91 with str generation for
    Forwards. Thanks decalage2 and Harmon758 for your patience.
  - Modified setParseAction to accept None as an argument,
    indicating that all previously-defined parse actions for the
    expression should be cleared.
  - Modified pyparsing_common.real and sci_real to parse reals
    without leading integer digits before the decimal point,
    consistent with Python real number formats. Original PR #98
    submitted by ansobolev.
  - Modified runTests to call postParse function before dumping out
    the parsed results - allows for postParse to add further results,
    such as indications of additional validation success/failure.
  - Updated statemachine example: refactored state transitions to use
    overridden classmethods; added &lt;statename&gt;Mixin class to simplify
    definition of application classes that "own" the state object and
    delegate to it to model state-specific properties and behavior.
  - Added example nested_markup.py, showing a simple wiki markup with
    nested markup directives, and illustrating the use of '...' for
    skipping over input to match the next expression. (This example
    uses syntax that is not valid under Python 2.)
  - Rewrote delta_time.py example (renamed from deltaTime.py) to
    fix some omitted formats and upgrade to latest pyparsing idioms,
    beginning with writing an actual BNF.
  - With the help and encouragement from several contributors, including
    Mat?j Cepl and Cengiz Kaygusuz, I've started cleaning up the internal
    coding styles in core pyparsing, bringing it up to modern coding
    practices from pyparsing's early development days dating back to
    2003. Whitespace has been largely standardized along PEP8 guidelines,
    removing extra spaces around parentheses, and adding them around
    arithmetic operators and after colons and commas. I was going to hold
    off on doing this work until after 2.4.1, but after cleaning up a
    few trial classes, the difference was so significant that I continued
    on to the rest of the core code base. This should facilitate future
    work and submitted PRs, allowing them to focus on substantive code
    changes, and not get sidetracked by whitespace issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Do not pull in setuptools dependency at all to avoid cycles</changelog>
  <changelog author="arun@gmx.de" date="1573905600">- update to version 2.4.5:
  * Fixed encoding when setup.py reads README.rst to include the
    project long description when uploading to PyPI. A stray unicode
    space in README.rst prevented the source install on systems whose
    default encoding is not 'utf-8'.
- changes from version 2.4.4:
  * Unresolved symbol reference in 2.4.3 release was masked by stdout
    buffering in unit tests, thanks for the prompt heads-up, Ned
    Batchelder!
- changes from version 2.4.3:
  * Fixed a bug in ParserElement.__eq__ that would for some parsers
    create a recursion error at parser definition time. Thanks to
    Michael Clerx for the assist. (Addresses issue #123)
  * Fixed bug in indentedBlock where a block that ended at the end of
    the input string could cause pyaprsing to loop forever. Raised as
    part of discussion on StackOverflow with geckos.
  * Backports from pyparsing 3.0.0:
    + __diag__.enable_all_warnings()
    + Fixed bug in PrecededBy which caused infinite recursion, issue
    [#127]
    + support for using regex-compiled RE to construct Regex
    expressions</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581422400">- update to 2.4.6
  * Fixed typos in White mapping of whitespace characters, to use
  correct "\u" prefix instead of "u".
  * fix bug in left-associative ternary operators defined using
  infixNotation. First reported on StackOverflow by user Jeronimo.
  * Backport of pyparsing_test namespace from 3.0.0, including
  TestParseResultsAsserts mixin class defining unittest-helper
  methods:
  . def assertParseResultsEquals(
  self, result, expected_list=None, expected_dict=None, msg=None)
  . def assertParseAndCheckList(
  self, expr, test_string, expected_list, msg=None, verbose=True)
  . def assertParseAndCheckDict(
  self, expr, test_string, expected_dict, msg=None, verbose=True)
  . def assertRunTestResults(
  self, run_tests_report, expected_parse_results=None, msg=None)
  . def assertRaisesParseException(self, exc_type=ParseException, msg=None)</changelog>
  <changelog author="dmueller@suse.com" date="1588680000">- update to 2.4.7:
  . Each bug with Regex expressions
  . And expressions not properly constructing with generator
  . Traceback abbreviation
  . Bug in delta_time example
  . Fix regexen in pyparsing_common.real and .sci_real
  . Avoid FutureWarning on Python 3.7 or later
  . Cleanup output in runTests if comments are embedded in test string</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- unittest2 -&gt; pytest</changelog>
</package>
<package pkgid="6bf2b945c1aa2e0578c4877078e95f1824afeb6e9c4359175f90fadd17c0fa01" name="python3-pytz" arch="noarch">
  <version epoch="0" ver="2021.1" rel="3.3.1"/>
  <changelog author="jayvdb@gmail.com" date="1566907200">- Add versioned dependency on timezone database to ensure the
  correct data is installed
- Remove system_zoneinfo.patch, and instead add a symlink to the
  system timezone database
- Replace unnecessary pytest, adding a missing __init__.py in the
  tests to allow the test suite to work on Python 2.7 without pytest</changelog>
  <changelog author="steven.kowalik@suse.com" date="1582545600">- Update to 2019.3
  * IANA 2019c</changelog>
  <changelog author="arun@gmx.de" date="1588420800">- specfile:
  * be more specific in %files section
  * README.txt -&gt; README.rst
- update to version 2020.1:
  * Test against Python 3.8 and Python 3.9
  * Bump version numbers to 2020.1/2020a
  * Base class for all errors
  * Add flake8 settings
  * IANA 2020a
  * Fix remaining references to README.txt
  * Update README.md
  * Use .rst extension for reStructuredText
  * typo
  * highlight codes
  * use .rst extension name
  * Tidelift links
  * Add links for security reports
  * Update LICENSE.txt
  * Create FUNDING.yml
  * Make FixedOffset part of public API</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2020.4:
  * update to IANA 2020d timezone release</changelog>
  <changelog author="dmueller@suse.com" date="1609243200">- update to 2020.5:
  * update to IANA 2020e timezone release</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2021.1:
  * update to IANA 2021a timezone release</changelog>
  <changelog author="code@bnavigator.de" date="1614081600">- Bump tzdata_version</changelog>
  <changelog author="pgajdos@suse.com" date="1622203200">- %check: use %pyunittest rpm macro</changelog>
  <changelog author="mcepl@suse.com" date="1624536000">- Remove real directory of %{python_sitelib}/pytz/zoneinfo when
  upgrading, before it is replaced by a symlink (bsc#1185748).</changelog>
  <changelog author="mcepl@suse.com" date="1625745600">- Add %pyunittest shim for platforms where it is missing.</changelog>
</package>
<package pkgid="e2b66fc1d2d47742e952bf69d87cac17a26327f089440b47ebfeee70db756e5a" name="python3-pyzmq" arch="x86_64">
  <version epoch="0" ver="17.1.2" rel="3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="89d71c20ba199d5ab01e24ca8d9d8ad8d64e95f16983c118399a7b4eb93f272c" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.24.0" rel="1.24"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)
- Switch off test_https_warnings test (bsc#1170175)</changelog>
</package>
<package pkgid="a1592b784bdb4480b4cf57986354694a073f80fa4fd034f0eedd5c9dd13019e0" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.46.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="85bec8c5f229dd57058679f4be72e75a50fc8db12bf1092a086eb5956f0e7283" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="150300.53.7.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1626868800">- Do noop for services states when running systemd in offline mode (bsc#1187787)
- transactional_updates: do not execute states in parallel but use a queue (bsc#1188170)
- Handle "master tops" data when states are applied by "transactional_update" (bsc#1187787)
- Enhance openscap module: add "xccdf_eval" call
- virt: pass emulator when getting domain capabilities from libvirt
- Adding preliminary support for Rocky Linux
- Implementation of held/unheld functions for state pkg (bsc#1187813)
- Replace deprecated Thread.isAlive() with Thread.is_alive()
- Fix exception in yumpkg.remove for not installed package
- Fix save for iptables state module (bsc#1185131)
- virt: use /dev/kvm to detect KVM
- zypperpkg: improve logic for handling vendorchange flags
- Add bundled provides for tornado to the spec file
- Enhance logging when inotify beacon is missing pyinotify (bsc#1186310)
- Add "python3-pyinotify" as a recommended package for Salt in SUSE/OpenSUSE distros
- Fix tmpfiles.d configuration for salt to not use legacy paths (bsc#1173103)
- Detect Python version to use inside container (bsc#1167586) (bsc#1164192)
- Handle volumes on stopped pools in virt.vm_info (bsc#1186287)
- grains.extra: support old non-intel kernels (bsc#1180650)
- Fix missing minion returns in batch mode (bsc#1184659)
- Parsing Epoch out of version provided during pkg remove (bsc#1173692)
- Added:
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * backport-thread.is_alive-fix-390.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch</changelog>
  <changelog author="victor.zhestkov@suse.com" date="1630497600">- Fix wrong relative paths resolution with Jinja renderer when importing subdirectories
- Don't pass shell="/sbin/nologin" to onlyif/unless checks (bsc#1188259)
- Add missing aarch64 to rpm package architectures
- Backport of upstream PR#59492
- Fix failing unit test for systemd
- Fix error handling in openscap module (bsc#1188647)
- Better handling of bad public keys from minions (bsc#1189040)
- Define license macro as doc in spec file if not existing
- Add standalone formulas configuration for salt minion and remove salt-master requirement (bsc#1168327)
- Added:
  * fix-failing-unit-tests-for-systemd.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633694400">- Support querying for JSON data in external sql pillar
- Exclude the full path of a download URL to prevent injection of
  malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * 3002.2-postgresql-json-support-in-pillar-424.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637150400">- Use dnfnotify instead yumnotify for relevant distros
- Remove wrong _parse_cpe_name from grains.core
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- tar is required by minion on transactional-update system
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Fix traceback.*_exc() calls
- Added:
  * mock-ip_addrs-in-utils-minions.py-unit-test-444.patch
  * remove-wrong-_parse_cpe_name-from-grains.core-452.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * 3002.2-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * fix-traceback.-_exc-calls-429.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1643889600">- Fix inspector module export function (bsc#1097531)
- Add all ssh kwargs to sanitize_kwargs method
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * vendor-stateresult.patch
  * fix-inspector-module-export-function-bsc-1097531-480.patch
  * refactor-and-improvements-for-transactional-updates-.patch</changelog>
</package>
<package pkgid="e05880be39c68c608e3c0f429fd48d1f77e960f797400d6feaf274b3d70f50b7" name="python3-selinux" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.5.3"/>
  <changelog author="jsegitz@suse.com" date="1521201600">- Updated spec file to use python3. Added python3.patch to fix
  build</changelog>
  <changelog author="mcepl@cepl.eu" date="1526299200">- Update to version 2.7.
  * %files needed to be heavily modified
  * Based expressly on python3, not just python
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20170804/RELEASE-20170804.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1539777600">- Update to version 2.8 (bsc#1111732).
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add security_reject_unknown(3) man page
  * Change matchpathcon usage to match with matchpathcon manpage
  * Do not define gettid() if glibc &gt;= 2.30 is used
  * Fix RESOURCE_LEAK defects reported by coverity scan
  * Fix line wrapping in selabel_file.5
  * Do not dereference symlink with statfs in selinux_restorecon
  * Fix overly strict validation of file_contexts.bin
  * Fix selinux_restorecon() on non-SELinux hosts
  * Fix the whatis line for the selinux_boolean_sub.3 manpage
  * Fix printf format string specifier for uint64_t
  * Fix handling of unknown classes/perms
  * Set an appropriate errno in booleans.c
- Dropped python3.patch, is now upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1558699200">- Set License: to correct value (bsc#1135710)</changelog>
  <changelog author="mliska@suse.cz" date="1559044800">- Disable LTO (boo#1133244).</changelog>
  <changelog author="mcepl@suse.com" date="1572436800">- Add python3.8-compat.patch which makes build possible even with
  Python 3.8, which doesn?t automatically adds -lpython&lt;ver&gt;</changelog>
  <changelog author="jsegitz@suse.de" date="1576497600">- Added swig4_moduleimport.patch to prevent import errors due to
  SWIG 4</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch</changelog>
</package>
<package pkgid="ef5295aa623331d4bd01c99e893abf464ac0569f454cef4c7a9cf2c46da3c8fa" name="python3-semanage" arch="x86_64">
  <version epoch="0" ver="3.1" rel="4.1"/>
  <changelog author="jsegitz@suse.com" date="1541678400">- Adjusted source urls (bsc#1115052)</changelog>
  <changelog author="jengelh@inai.de" date="1541678401">- Use more %make_install.</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Always set errno to 0 before calling getpwent()
  * Include user name in ROLE_REMOVE audit events
  * genhomedircon - improve handling large groups
  * improve semanage_migrate_store import failure
  * reset umask before creating directories
  * set selinux policy root around calls to selinux_boolean_sub
  * use previous seuser when getting the previous name</changelog>
  <changelog author="mliska@suse.cz" date="1556884800">- Disable LTO (boo#1133280).</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Add support for DCCP and SCTP protocols
  * include internal header to use the hidden function prototypes
  * mark all exported function "extern"
  * optionally optimize policy on rebuild
  Refreshed suse_path.patch</changelog>
  <changelog author="jsegitz@suse.de" date="1590753600">- Apply suse_path.patch only for older distributions. Newer
  use libexec</changelog>
  <changelog author="dimstar@opensuse.org" date="1591272000">- Drop suse_path.patch: replace it with a grep/sed logic replacing
  /usr/libexec in all files with the correct value for all distros
  (taking into account that openSUSE is in progress of migrating
  from /usr/lib to /usr/libexec).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1591963200">- Fix build with LTO: [bsc#1133102]
  * Enable LTO (Link Time Optimization)
  * Update map file to include new symbols and remove wildcards
- Add libsemanage-update-map-file.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1592308800">- Disabled LTO again. This breaks e.g. shadow and also other packages
  in security:SELinux</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1
  * Improved manpage
  * fsync final files before rename</changelog>
</package>
<package pkgid="ae74f661c03c9f9f2af94c84777e1e2884537269d02d92365d95d20be992d2b8" name="python3-setools" arch="x86_64">
  <version epoch="0" ver="4.3.0" rel="4.1"/>
  <changelog author="mcepl@suse.com" date="1526472000">- Upgrade to 4.1.1</changelog>
  <changelog author="jsegitz@suse.com" date="1528718400">- Added warning.patch in former change to prevent warnings from
  stopping the build</changelog>
  <changelog author="jsegitz@suse.com" date="1542801600">- Upgrade to 4.2.0
  * Support for Python 2.7 was dropped
  * Symbol names are now available as the name attribute (e.g. Boolean.name, Type.name, etc.)
  * Move constraint expression to its own class.
  * Made Conditional.evaluate() more useful and added BaseTERule.enabled() method to determine if a rule is enabled..
  * Added support for SCTP portcons
  * Updated permission maps
- Dropped warning.patch
- Single spec, limited to python3. Obsoletes python-setools, provides
  python3-setools</changelog>
  <changelog author="jsegitz@suse.com" date="1544184000">- Changed requires of console subpackage to python3-setools</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- Update to 4.2.1
  * Set SIGPIPE handler for CLI tools.
  * Fixed alias dereferencing in TypeQuery and type, category, and
    sensitivity lookups.
  * Fixed sediff bug for rendering modified nodecons.
  * Fixed devicetreecon count output.
  * Fixed policy target platform check.
  * Fixed bug in creating permission set intersection in apol.
- Provide python-setools</changelog>
  <changelog author="mcepl@suse.com" date="1572523200">- Update to the upstream version 4.2.2:
  - Remove source policy references from man pages, as loading
    source policies is no longer supported.
  - Fixed a performance regression in alias loading after alias
    dereferencing fixes in 4.2.1.</changelog>
  <changelog author="mcepl@suse.com" date="1572523201">- Add python3.8-compat.patch to allow build with Python 3.8
  Still doesn't work though because of gh#SELinuxProject/setools#31</changelog>
  <changelog author="jsegitz@suse.de" date="1585915200">- Update to the upstream version 4.3.0:
  * Revised sediff method for TE rules. This drastically reduced memory
    and run time.
  * Added infiniband context support to seinfo, sediff, and apol.
  * Added apol configuration for location of Qt assistant.
  * Fixed sediff issue where properties header would display when not
    requested.
  * Fixed sediff issue with type_transition file name comparison.
  * Fixed permission map socket sendto information flow direction.
  * Added methods to TypeAttribute class to make it a complete Python
    collection.
  * Genfscon now will look up classes rather than using fixed values
    which were dropped from libsepol
- Dropped python3.8-compat.patch</changelog>
  <changelog author="kukuk@suse.com" date="1596024000">- python3-setools needs python3-networkx</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Cleanup BuildRequires
- Fix setools-gui dependencies, we are using python-qt5 and not
  tcl/tk</changelog>
</package>
<package pkgid="833fb5e6ea1e95fde6fc0aaed573c331daf1beab0b79b835ad0b66410f2f641f" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="40.5.0" rel="6.3.1"/>
  <changelog author="tchvatal@suse.com" date="1521460800">- Version update to 39.0.1:
  * Fix utf parsing with python2
  * Various other fixes</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- update to version 39.1.0:
  * #1340: Update all PyPI URLs to reflect the switch to the new
    Warehouse codebase.
  * #1337: In pkg_resources, now support loading resources for modules
    loaded by the SourcelessFileLoader.
  * #1332: Silence spurious wheel related warnings on Windows.</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 39.2.0:
  * #1359: Support using "file:" to load a PEP 440-compliant package
    version from a text file.
  * #1360: Fixed issue with a mismatch between the name of the package
    and the name of the .dist-info file in wheel files
  * #1364: Add __dir__() implementation to
    pkg_resources.Distribution() that includes the attributes in the
    _provider instance variable.
  * #1365: Take the package_dir option into account when loading the
    version from a module attribute.
  * #1353: Added coverage badge to README.
  * #1356: Made small fixes to the developer guide documentation.
  * #1357: Fixed warnings in documentation builds and started
    enforcing that the docs build without warnings in tox.
  * #1376: Updated release process docs.
  * #1343: The setuptools specific long_description_content_type,
    project_urls and provides_extras fields are now set consistently
    after any distutils setup_keywords calls, allowing them to
    override values.
  * #1352: Added tox environment for documentation builds.
  * #1354: Added towncrier for changelog managment.
  * #1355: Add PR template.
  * #1368: Fixed tests which failed without network connectivity.
  * #1369: Added unit tests for PEP 425 compatibility tags support.
  * #1372: Stop testing Python 3.3 in Travis CI, now that the latest
    version of wheel no longer installs on it.</changelog>
  <changelog author="arun@gmx.de" date="1531396800">- update to version 40.0.0:
  * #1342: Drop support for Python 3.3.
  * #1366: In package_index, fixed handling of encoded entities in
    URLs.
  * #1383: In pkg_resources VendorImporter, avoid removing packages
    imported from the root.
  * #1379: Minor doc fixes after actually using the new release
    process.
  * #1385: Removed section on non-package data files.
  * #1403: Fix developer's guide.
  * #1404: Fix PEP 518 configuration: set build requirements in
    pyproject.toml to ["wheel"].</changelog>
  <changelog author="arun@gmx.de" date="1534593600">- specfile:
  * removed devel for noarch package
- update to version 40.1.0:
  * #1410: Deprecated upload and register commands.
  * #1312: Introduced find_namespace_packages() to find PEP 420
    namespace packages.
  * #1420: Added find_namespace: directive to config parser.
  * #1418: Solved race in when creating egg cache directories.
  * #1450: Upgraded vendored PyParsing from 2.1.10 to 2.2.0.
  * #1451: Upgraded vendored appdirs from 1.4.0 to 1.4.3.
  * #1388: Fixed "Microsoft Visual C++ Build Tools" link in exception
    when Visual C++ not found.
  * #1389: Added support for scripts which have unicode content.
  * #1416: Moved several Python version checks over to using six.PY2
    and six.PY3.
  * #1441: Removed spurious executable permissions from files that
    don't need them.</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Use noun phrase in summary.</changelog>
  <changelog author="arun@gmx.de" date="1535803200">- update to version 40.2.0:
  * #1466: Fix handling of Unicode arguments in PEP 517 backend
- changes from version 40.1.1:
  * #1465: Fix regression with egg_info command when tagging is used.</changelog>
  <changelog author="arun@gmx.de" date="1538308800">- update to version 40.4.3:
  * #1480: Bump vendored pyparsing in pkg_resources to 2.2.1.
- changes from version 40.4.2:
  * #1497: Updated gitignore in repo.
- changes from version 40.4.1:
  * #1480: Bump vendored pyparsing to 2.2.1.
- changes from version 40.4.0:
  * #1481: Join the sdist --dist-dir and the build_meta sdist
    directory argument to point to the same target (meaning the build
    frontend no longer needs to clean manually the dist dir to avoid
    multiple sdist presence, and setuptools no longer needs to handle
    conflicts between the two).
- changes from version 40.3.0:
  * #1402: Fixed a bug with namespace packages under Python 3.6 when
    one package in current directory hides another which is
    installed.
  * #1427: Set timestamp of .egg-info directory whenever egg_info
    command is run.
  * #1474: build_meta.get_requires_for_build_sdist now does not
    include the wheel package anymore.
  * #1486: Suppress warnings in pkg_resources.handle_ns.
  * #1479: Remove internal use of six.binary_type.</changelog>
  <changelog author="arun@gmx.de" date="1540900800">- update to version 40.5.0:
  * #1335: In pkg_resources.normalize_path, fix issue on Cygwin when
    cwd contains symlinks.
  * #1502: Deprecated support for downloads from Subversion in
    package_index/easy_install.
  * #1517: Dropped use of six.u in favor of u"" literals.
  * #1520: Added support for data_files in setup.cfg.
  * #1525: Fixed rendering of the deprecation warning in easy_install
    doc.</changelog>
  <changelog author="mcepl@suse.com" date="1605355200">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
</package>
<package pkgid="ecba87998389fb7f41fbd452065ef571cd9c947ebdfcf8731ce2abb2b0fbcf8c" name="python3-six" arch="noarch">
  <version epoch="0" ver="1.14.0" rel="12.1"/>
  <changelog author="mcepl@suse.com" date="1544443200">- Update to 0.12.0:
  * `six.add_metaclass` now preserves `__qualname__` from the
    original class.
  * Add `six.ensure_binary`, `six.ensure_text`, and
    `six.ensure_str`.
- Because of cyclical dependencies between six and Sphinx, we
  need to to do multibuild.</changelog>
  <changelog author="tchvatal@suse.com" date="1547726400">- Require just base python module, even full python is too much
  and it is not required here</changelog>
  <changelog author="ngompa13@gmail.com" date="1548417600">- Change %pretrans back to %pre to fix bootstrap issue
  boo#1123064 bsc#1143893</changelog>
  <changelog author="tchvatal@suse.com" date="1560254400">- Fix pytest call
- Fixdocumentation package generating</changelog>
  <changelog author="tchvatal@suse.com" date="1563451200">- Simplify the pytest call</changelog>
  <changelog author="dmueller@suse.com" date="1576843200">- update to 0.13.0:
  - Issue #298, pull request #299: Add `six.moves.dbm_ndbm`.
  - Issue #155: Add `six.moves.collections_abc`, which aliases the `collections`
    module on Python 2-3.2 and the `collections.abc` on Python 3.3 and greater.
  - Pull request #304: Re-add distutils fallback in `setup.py`.
  - Pull request #305: On Python 3.7, `with_metaclass` supports classes using PEP</changelog>
  <changelog author="tchvatal@suse.com" date="1577966400">- Pull in dbm/gdbm module from python for testing</changelog>
  <changelog author="mimi.vx@gmail.com" date="1579608000">- update to 1.14.0
  * Add `six.assertNotRegex`
  * `six.moves._dummy_thread` now points to the `_thread` module on
    Python 3.9+. Python 3.7 and later requires threading and deprecated the
    `_dummy_thread` module
  * Remove support for Python 2.6 and Python 3.2
  * `six.wraps` now ignores missing attributes</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- use setuptools for building to support pip 10.x (bsc#1166139)</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Do not cause buildcycle with previous change but rather
  install the egg-info prepared metadata from the tarball</changelog>
</package>
<package pkgid="c3b3ff45bd91cb053f69d2581d256d3320a5145af779e407ec2bb82ff405d4db" name="python3-slip" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="4.21"/>
  <changelog author="mchandras@suse.de" date="1452168000">- Initial package. Version 0.6.4</changelog>
  <changelog author="mchandras@suse.de" date="1453377600">- Amend package dependencies and update copyright date
  * Drop the polkit dependency since python-slip-dbus can work without it
  * Add missing python-six dependency</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 0.6.5
  * Fix org.freedesktop.DBus.Error.ServiceUnknown errors without
    polkitd (gh#nphilipp/python-slip#4)
  * cope with changes in supplied upload_url</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Finalize singlespec conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1511438400">- Fix python dbus requirement (bsc#1069504)</changelog>
  <changelog author="tchvatal@suse.com" date="1513080000">- Make sure to build with python3 only present on system</changelog>
</package>
<package pkgid="f80ee8f761ff6c8b900cb3273c54f691f06562a2b16dfe2cfd46c894450a6f77" name="python3-slip-dbus" arch="noarch">
  <version epoch="0" ver="0.6.5" rel="4.21"/>
  <changelog author="mchandras@suse.de" date="1452168000">- Initial package. Version 0.6.4</changelog>
  <changelog author="mchandras@suse.de" date="1453377600">- Amend package dependencies and update copyright date
  * Drop the polkit dependency since python-slip-dbus can work without it
  * Add missing python-six dependency</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 0.6.5
  * Fix org.freedesktop.DBus.Error.ServiceUnknown errors without
    polkitd (gh#nphilipp/python-slip#4)
  * cope with changes in supplied upload_url</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Finalize singlespec conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1511438400">- Fix python dbus requirement (bsc#1069504)</changelog>
  <changelog author="tchvatal@suse.com" date="1513080000">- Make sure to build with python3 only present on system</changelog>
</package>
<package pkgid="ee38d7bb839d90f32ea067c3b34812af15090e3789291bb14668e2149dfafafd" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
</package>
<package pkgid="931a0f0f9b6eeef7ca5acfa33cffae7fd4a52b6755305a41ff8fe4cad0959ee3" name="python3-zypp-plugin" arch="noarch">
  <version epoch="0" ver="0.6.3" rel="2.18"/>
  <changelog author="coolo@suse.com" date="1336564800">- patch license to be in spdx.org format</changelog>
  <changelog author="ma@suse.de" date="1390651200">- Add .pyc/.pyo to package
- version 0.4</changelog>
  <changelog author="ma@suse.de" date="1408363200">- Force usage of the official python VM; no longer use
  "/usr/bin/env python" (bnc#889363)
- version 0.5</changelog>
  <changelog author="lchiquitto@suse.de" date="1425988800">- Add COPYING file</changelog>
  <changelog author="ma@suse.de" date="1509019200">- Fix specfile to be able to build for python3
- version 0.6</changelog>
  <changelog author="ma@suse.de" date="1509019201">- Let zypp-plugin-python provide python2-zypp-plugin to be
  consistent with python3-zypp-plugin.
- version 0.6.1</changelog>
  <changelog author="ma@suse.de" date="1510228800">- Don't use a shebang in the module
- version 0.6.2</changelog>
  <changelog author="tchvatal@suse.com" date="1512993600">- Switch to singlespec packaging to make it easy to disable either
  python3 or python2 plugin and make sure all is buildable
- version 0.6.3</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Fix a bit the obsoletes/provides to allow migration, previously
  was overwritten by macros
- BR python-rpm-macros to build on older distributions
- Fix bit python detection conditions on install phase to be better
  readable and uniform</changelog>
  <changelog author="ma@suse.de" date="1516363200">- Disable singlespec packaging in SLE12* and older distros while it's
  not working there. They provide python2 packages only.</changelog>
</package>
<package pkgid="e7c8aca3c3557d0b151844eff22fd942f5ee83dbc47072ec4f656817ee687672" name="qemu" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="61d77db8bc2fe1d2edc9f491faeb6d6e56c4de4f5aaf7abacf4716bb11b73faa" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="20974b2df78ddc2dc078eeb1d60962c26e3aa8cb4f02d7dc704d1fcfcc9d497a" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="70728cb0dc6f96b664bc2520a8ffabc4815671f88a95f31605a52520c25e70a5" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="176c4eefd5bd642a3bc61f9cc29a67886940b0abfd5ea27b6d64faba7e3d727b" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="bdd45a23d73012af14b0e1789a3939b6081d8b11ecf9092c8daa791cf3a5bd1f" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="495e004005a0401eeef0b39e2ad47fbefab22d0d11655f595b056336e4764ac9" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="517d6a7907508b90cb94f3e3e1c0a3137c184df8a356ec15df965ea225082609" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="391a41c6fa1e5b8b758f52550eb2ffb48dfb64bd550c901d5a8fb4ca1975e775" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="a557809493bfb9a20491e7855f7419e33b556719e2bc615b6dba56569a2dbed7" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="202008" rel="10.11.1"/>
  <changelog author="glin@suse.com" date="1604577600">- Update the json descriptors to address all x86_64 firmware files
  (jsc#SLE-15915)
- Remove the executable bit from brotli source code files</changelog>
  <changelog author="glin@suse.com" date="1605614400">- Add ovmf-jscSLE-16075-SEV-ES-fixes.patch to merge upstream SEV-ES
  fixes (jsc#SLE-16075)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1610452800">- Add ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues (bsc#1180079)
- Add the json descriptor for xen-hvm (bsc#1180050)</changelog>
  <changelog author="glin@suse.com" date="1611921600">- Add ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
- Update 50-xen-hvm-x86_64.json to add "nvram-template" and change
  the firmware file to ovmf-x86_64-ms-4m.bin
  (bsc#1180050, bsc#1181264)
- Refresh ovmf-bsc1180079-amd-sev-es-mitigation.patch
  + Use "git format-patch --no-renames" to generate the patch to
    avoid confusing quilt with the renamed files</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1184938)
- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64</changelog>
  <changelog author="glin@suse.com" date="1620129600">- Update the descriptors to add "acpi-s4" tag to allow libvirt
  enable hibernation (bsc#1182886#c31)</changelog>
  <changelog author="glin@suse.com" date="1623067200">- Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe (bsc#1186151)</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Add ovmf-bsc1192126-OvmfPkg-PlatformPei-Always-reserve-the-SEV-ES-work-a.patch
  to fix unlimited reset. (bsc#1192126)</changelog>
</package>
<package pkgid="a77ad3e79a263e7806394433ed45912a608c7927099c505f631f82d0df427cf1" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.14.0_0_g155821a" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="2959e91bfb23c99d72fb261a594ac1f81f9561cab461bd15258d1af5414890e3" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="1f336f6471a3fd4c5b9f0a1c733d2433e79f4b0c958f309ffe117e5d3a3c789e" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="7f9d6d020b3cce542a08ffd5a65877503a51a1a9937cd31c9d2665fbb43134a7" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="cf70e199a1bcdf04020ca968a94d32d89859a6e02a0c8606bdef0162642ba62b" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="c8a70511353f19374e5660f545f5a41f423a10a118f04106c6affac79c01ca11" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.14.0_0_g155821a" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="cfbc83d035bd5b4a8b984a20d22b978e6730fad40ac0ff5adb5488a147e28497" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="150300.112.4"/>
  <changelog author="lma@suse.com" date="1634731200">- Introduce max_hw_iov for use in scsi-generic (bsc#1190425)
  * Patches added:
  block-introduce-max_hw_iov-for-use-in-sc.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1637928000">- update_git.sh: make sure special directories are defined and created
  before they're used</changelog>
  <changelog author="dfaggioli@suse.com" date="1640174400">- Rename the Guest Agent service qemu-guest-agent, like in other
  distros (and upstream). bsc#1185543</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260800">- Amend .changes file: avoid declaring a still unfixed CVE, as
  fixed (bsc#1187529)</changelog>
  <changelog author="dfaggioli@suse.com" date="1640260801">- Fix "block/fdc: null pointer dereference may lead to guest crash"
  (CVE 2021-20196, bsc#1181361)
  * Patches added:
    hw-block-fdc-Kludge-missing-floppy-drive.patch
    hw-block-fdc-Extract-blk_create_empty_dr.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235200">- Fix "kvm,qemu: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c"
  (bsc#1192525, CVE-2021-3930)
  * Patches added:
  hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-all.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1644235201">- Fix "qemu,kvm: potential privilege escalation via virtiofsd"
  (bsc#1195161, CVE-2022-0358)
  * Patches added:
  virtiofsd-Drop-membership-of-all-supplem.patch</changelog>
  <changelog author="lma@suse.com" date="1644408000">- Add the qemu patches in bsc#1178049(sles 15 sp2) to qemu v5.2.
  (bsc#1178049, bsc#1194938)
  * Patches added:
  scsi-add-tracing-for-SG_IO-commands.patch
  scsi-disk-fold-SG_IO-errors-back-into-re.patch
  scsi-disk-set-default-I-O-timeout-to-30-.patch
  scsi-disk-trace-rw-errors.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-make-io_timeout-settable.patch
  virtio-scsi-change-DID-TIMEOUT-handling.patch
  virtio-scsi-trace-events.patch
  virtio-scsi-translate-SG_IO-host-status.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827200">- Build PPC firmwares from sources on non-PPC builds as well
  (bsc#1193545)
- Build RiscV firmwares on non-RiscV builds as well
- While there, refactor (and simplify!) the firmware building
  logic and code
- Include vmxcap in the qemu-tools package (is being very useful
  for debugging bsc#1193364)
- The qemu package should require qemu-x86, qemu-arm, etc, as there's
  no point installing it without _any_ of them. Additionally, right
  now, the user does not get a working qemu, if recommended packages
  are disabled (e.g., on MicroOS or SLE Micro). bsc#1196087
- Give clearer instructions on how to modify the package patches
  from the output of update_git.sh (docs change only, no functional
  change)
  * Patches added:
  Makefile-define-endianess-for-cross-buil.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1646827201">- Fix "QEMU direct kernel boot cmdline can corrupt guest kernel data"
  (bsc#1196737)
  * Patches added:
  s390x-ipl-check-kernel-command-line-size.patch</changelog>
</package>
<package pkgid="5e0cb657f2d0f215a5bce228d1280f51a308bb8af1241ec4a37e6fef77732f10" name="radvd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="759c3e13db8cb262f0f8f5ad49a0a63d48619c78b97ec00b3a503ec38d85ba2d" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="31.0" rel="2.14"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
</package>
<package pkgid="efa4e09488ff0b346297ce821531eaeb1db4bbe340f7dbb1709e25c9f1f6e4fd" name="read-only-root-fs" arch="noarch">
  <version epoch="0" ver="1.0+git20200730.1243fd0" rel="150300.4.1"/>
  <changelog author="kukuk@suse.de" date="1549454400">- Fix file list</changelog>
  <changelog author="iforster@suse.com" date="1549454401">- Update description to reflect new behaviour
- Fix creation of overlay directories</changelog>
  <changelog author="iforster@suse.com" date="1559822400">- Update to version 1.0+git20190606.e1f756c:
  * Mount writable /boot subvolume in GRUB environment
- Create /boot/writable subvolume to provide a place to store the
  GRUB environment block or Ignition's firstboot flag on a ro root
  device</changelog>
  <changelog author="iforster@suse.com" date="1559908800">- Update to version 1.0+git20190607.11f8587:
  * Determine /@ programmatically</changelog>
  <changelog author="kukuk@suse.com" date="1573560000">- Update to version 1.0+git20191112.42add9e:
  * Add RequiresMountsFor=/etc override for systemd-udevd.service</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1575374400">- Update to version 1.0+git20191203.3f7cc07:
  * Workaround /var being RO during systemd-journal-flush (boo#1156421)</changelog>
  <changelog author="iforster@suse.com" date="1579608000">- Update to version 1.0+git20200121.5ed8d15:
  * Always mount /root during initrd [boo#1161264]</changelog>
  <changelog author="kukuk@suse.com" date="1595332800">- Use file requires, add sed</changelog>
  <changelog author="iforster@suse.com" date="1596110400">- Update to version 1.0+git20200730.1243fd0:
  * Add comment about the mounting of /root in the initrd
  * Better check for already existing /etc overlay [boo#1174733]</changelog>
  <changelog author="kukuk@suse.com" date="1599048000">- Adjust btrfsmaintenance sysconfig to not use the read-only
  root filesystem [bsc#1176052]</changelog>
</package>
<package pkgid="449310cf43c10b34058ac95c7389bdd4ea2030e0fe1d6789da8c6c5e59f7bd5b" name="rebootmgr" arch="x86_64">
  <version epoch="0" ver="1.3" rel="150300.3.2"/>
  <changelog author="kukuk@suse.de" date="1568030400">- Fix %config for backward compatibility</changelog>
  <changelog author="kukuk@suse.de" date="1572868800">- Update to version 0.20.1
  - added a memory allocation check</changelog>
  <changelog author="iforster@suse.com" date="1574856000">- Fix %posttrans script returning an error code</changelog>
  <changelog author="kukuk@suse.com" date="1580299200">- Disable ectd support (no current etcd C-library available)</changelog>
  <changelog author="kukuk@suse.com" date="1587988800">- Update to version 1.0
  - Rewrite rebootmgrd to not depend on glib and dbus-glib</changelog>
  <changelog author="kukuk@suse.com" date="1587988801">- Adjust BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1588248000">- Use official tar archive</changelog>
  <changelog author="kukuk@suse.com" date="1588248001">- Update to version 1.1
  - fix systemd and tmpfiles.d directory path</changelog>
  <changelog author="kukuk@suse.com" date="1591617600">- Update to version 1.2
  - depend on dbus and not network as we disabled etcd support
    [bsc#1172518]</changelog>
  <changelog author="kukuk@suse.com" date="1593604800">- Update to version 1.3
  - Fix documentation of is-active return  value [bsc#1173484]
  - Fix crash if rebootmgrd is already running
  - Fix systemctl restart</changelog>
</package>
<package pkgid="d6035f1bd72974dccf092d042d3f060f0fb337e45d972610b82e2b80cbebadfb" name="release-notes-sle-micro" arch="noarch">
  <version epoch="0" ver="5.2.20220208" rel="150300.1.7"/>
  <changelog author="lukas.kucharczyk@suse.com" date="1614772800">- Update source branch to 5_0.</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1614859200">- Add provides for SUSE-MicroOS</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1615377600">- Update to 5.0.20210310</changelog>
  <changelog author="sknorr@suse.com" date="1615896000">- 5.0.20210316
- About product:
  - Added basic support information
- Installation:
  - Added information about how to disable second stage
  - Updated list of AutoYaST modules
- General:
  - Added note about System V Init being disabled</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1626091200">- 5.1.20210712 (tracked in bsc#933411)
- Fixed incorrect SELinux statement (bsc#1185837)
- Fixed the list of supported AutoYaST sections (bsc#1185844)</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1630411200">- 5.1.20210831 (tracked in bsc#933411)
- Add note about Kernel Live Patching
- Add note about Intel SDO</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1632484800">- 5.1.20210924 (tracked in bsc#933411)
- Updated note about upgrading
- Updated note about SUSE Manager
- Updated note about unsupported SELinux
- Updated note about Kernel Live Patching
- Added note about duplicate IP</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1641470400">- Initial update for 5.2</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1641470401">- Fix release note directory path</changelog>
  <changelog author="lukas.kucharczyk@suse.com" date="1644321600">- 5.2.20220208 (tracked in bsc#933411)
- More changes for 5.2</changelog>
</package>
<package pkgid="700b0498d30ed073e27ef84142cab9b564e6894b8cbf1b3f15df4a52e435af2e" name="rollback-helper" arch="noarch">
  <version epoch="0" ver="1.0+git20181218.5394d6e" rel="4.3.1"/>
  <changelog author="kukuk@suse.de" date="1479211200">- Add missing systemd requires macro, remove wrong branding PreReq
  [bsc#1011912]</changelog>
  <changelog author="jsrain@suse.cz" date="1495454400">- check whether system is registered before rollback (bsc#1032129)</changelog>
  <changelog author="lnussel@suse.de" date="1501156800">- use packageand(snapper:SUSEConnect) to install with SUSEConnect
  (boo#1050428)</changelog>
  <changelog author="iforster@suse.com" date="1516881600">- check if current btrfs snapshot is the production snapshot before
  re-registering (bsc#1068947)
- unified branching versions (Jul 27 2017 vs. May 22 2017)</changelog>
  <changelog author="kukuk@suse.de" date="1524052800">- Add COPYING file
- Package /var/lib/rollback directory
- Update to version 1.0+git20180418.496ed81: [bsc#1090073]
  * Call SUSEConnect --rollback always, not only if a registered
    product is installed. We can run into situations, where this is
    not the case, else the script is anyways only called after a
    rollback was done.
  * Only touch the file, don't copy old repo or service data.
  * Fix dependencies of service: script should only run if network
    is available and all filesystems are mounted.</changelog>
  <changelog author="kukuk@suse.de" date="1524052801">- Update to version 1.0+git20180418.fce02cf:
  * rollback.service: don't write output to tty instead of journal</changelog>
  <changelog author="kukuk@suse.de" date="1524052802">- Update to version 1.0+git20180418.6328b58:
  * rollback.service: Fix typo in dependencies</changelog>
  <changelog author="kukuk@suse.de" date="1524139200">- Update to version 1.0+git20180419.3c7281d:
  * Correct fix for unregistered systems [bsc#1032129]</changelog>
  <changelog author="jsrain@suse.cz" date="1524830400">- do not build on 32-bit architectures (bsc#1088552)</changelog>
  <changelog author="iforster@opensuse.org" date="1545134400">- Update to version 1.0+git20181218.5394d6e:
  * Add handling for separate /var subvolumes [bsc#1115555]
  * Run before any other services calling zypper [bsc#1113048]
  * Retry network connection if it doesn't work yet [bsc#1108618]</changelog>
</package>
<package pkgid="c88d7a58193139be163b77b34be1ee2e4bd9c8a9e79b1f1a59773d6038a70a6d" name="rpcbind" arch="x86_64">
  <version epoch="0" ver="0.2.3" rel="5.9.2"/>
  <changelog author="fbui@suse.com" date="1465300800">-  Do not rely on systemd.pc to find out where systemd unit dir is located (bsc#983167)
  systemd.pc is part of systemd main package now. Instead of
  build-requiring systemd, import systemd-rpm-macros which has the
  %{_unitdir} definition and much less dependencies than systemd and
  use it when configuring rpcbind so it won't try to find the unit dir
  by using pkg-config.
  Also replace BR libsystemd-daemon by libsystemd since the former is
  obsolete and is replaced by the later.</changelog>
  <changelog author="kukuk@suse.de" date="1478952000">- Move /var/lib/rpcbind to /run/rpcbind, data should not survive
  reboot and this makes read-only root filesystem easier.</changelog>
  <changelog author="kukuk@suse.de" date="1479816000">- Add 0012-Move-default-state-dir-to-a-subdirectory-of-var-run.patch
  from upstream, replacing systemd tmpfile solution.</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust for new system user/group RPMs</changelog>
  <changelog author="schwab@suse.de" date="1495022400">- svc-freeargs.patch: always call svc_freeargs, even if svc_getargs
  failed (bsc#1037559, CVE-2017-8779)</changelog>
  <changelog author="kukuk@suse.de" date="1502884800">- Add BuildRequires libnsl-devel (needed for obsoleting nsl in
  glibc)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1539345600">- fix tool stack buffer overflow (bsc#969953)
  add 0001-rpcinfo-Fix-stack-buffer-overflow.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1559563200">- change rpcbind locking path from /var/run/rpcbind.lock to
  /run/rpcbind.lock (bsc#1134659)
  add 0001-change-lockingdir-to-run.patch
- change the order of socket/service in the %postun scriptlet to
  avoid an error from rpcbind.socket when rpcbind is running
  during package update</changelog>
  <changelog author="thomas.blume@suse.com" date="1567771200">- return correct IP address with multiple ip addresses in the same
  subnet (bsc#1142343)
  add 0001-rpcbind-look-for-an-exact-match-of-the-ip-address-fo.patch</changelog>
</package>
<package pkgid="f4eb7b150a569ceba8238ae7cd10bb31e87b9d24ec06a64f6b1da668c9077fc4" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.46.1"/>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors ?-whatobsoletes and ?-whatconflicts
  * add support for sorting caret (?^?) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
</package>
<package pkgid="204a4d08197d0ba67053a2f24c135fe93877f9956e29940177a93621351de203" name="rpm-config-SUSE" arch="noarch">
  <version epoch="0" ver="1" rel="5.6.1"/>
  <changelog author="mls@suse.de" date="1607428800">- Initial split of RPM vendor configuration from rpm package
  [jsc#SLE-17074]</changelog>
  <changelog author="mls@suse.de" date="1611576000">- Backport find-*.ksyms fixes from Factory [jsc#SLE-7692]:
  * move modinfo and modprobe commands
  * generate kernel module requires for module-load.d files
  * use "if kernel" for modules-load.d requires
  * fix version handling in kernel-uname-r requires
  * fix awk gensub warning
- changed files: find-provides.ksyms, find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1611662400">- Add missing fileattrs/modulesload.attr file to generate requires
  for modules-load.d entries [jsc#SLE-7692]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Support ZSTD compressed kernel modules
  [bsc#1190850,
  bsc1190850-support-zstd-compressed-kernel-modules.patch]</changelog>
  <changelog author="qkzhu@suse.com" date="1636977600">- Add bsc1192160-rpm-config-SUSE-support-compressed-firmware-files.patch:
  Backported from e4c04ac, the upcoming kernel will support the
  compressed firmware files, and this patch corresponds to that kernel
  change, fixing firmware.prov to deal with the xz-compressed firmware
  files as well (bsc#1192160).</changelog>
</package>
<package pkgid="01eeacb70dc9dc14baa74d0e0b9b564e35e722d80e87003fb1824cba28a5cebf" name="rsync" arch="x86_64">
  <version epoch="0" ver="3.1.3" rel="4.10.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1511870400">- Security fix [bsc#1066644, CVE-2017-16548]
  * Missing trailing '\0' character check could lead to remote DoS
  * Added rsync-CVE-2017-16548.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1515499200">- Fix: Stop file upload after errors [bsc#1062063]
- Added patches:
  * rsync-send_error_to_sender.patch
  * rsync-avoid-uploading-after-error.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516276800">- Security fix: Ignore --protect-args when already sent by client
  [bsc#1076503, CVE-2018-5764]
  * Added patch rsync-3.1.2-CVE-2018-5764.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1517227200">- Update to version 3.1.3 [bsc#1076503]:
  Protocol: 31 (unchanged)
- SECURITY FIXES:
  * Fixed a buffer overrun in the protocol's handling of xattr names and
    ensure that the received name is null terminated.
  * Fix an issue with --protect-args where the user could specify the arg
    in the protected-arg list and short-circuit some of the arg-sanitizing
    code.
- BUG FIXES:
  * Don't output about a new backup dir without appropriate info verbosity.
  * Fixed some issues with the sort functions in support/rsyncstats script.
  * Added a way to specify daemon config lists (e.g. users, groups, etc)
  * that contain spaces (see "auth users" in the latest rsyncd.conf manpage).
  * If a backup fails (e.g. full disk) rsync exits with an error.
  * Fixed a problem with a doubled --fuzzy option combined with --link-dest.
  * Avoid invalid output in the summary if either the start or end time had
    an error.
  * We don't allow a popt alias to affect the --daemon or --server options.
  * Fix daemon exclude code to disallow attribute changes in addition to
    disallowing transfers.
  * Don't force nanoseconds to match if a non-transferred, non-checksummed
    file only passed the quick-check w/o comparing nanosecods.
- ENHANCEMENTS:
  * Added the ability for rsync to compare nanosecond times in its
    file-check
    comparisons, and added support nanosecond times on Mac OS X.
  * Added a short-option (-@) for --modify-window.
  * Added the --checksum-choice=NAME[,NAME] option to choose the checksum
    algorithms.
  * Added hashing of xattr names (with using -X) to improve the handling of
    files with large numbers of xattrs.
  * Added a way to filter xattr names using include/exclude/filter rules
    (see the --xattrs option in the manpage for details).
  * Added "daemon chroot|uid|gid" to the daemon config (in addition to the
    old chroot|uid|gid settings that affect the daemon's transfer process).
  * Added "syslog tag" to the daemon configuration.
  * Some manpage improvements.
- DEVELOPER RELATED:
  * Tweak the "make" output when yodl isn't around to create the man pages.
  * Changed an obsolete autoconf compile macro.
  * Support newer yodl versions when converting man pages.
- Dropped patches fixed upstream:
  * rsync-CVE-2017-16548.patch
  * rsync-3.1.2-CVE-2018-5764.patch
- Refreshed patches:
  * rsync-send_error_to_sender.patch</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1531310400">- Don't require systemd explicit, spec file can handle both cases
  correct and in containers we don't have systemd [bsc#1100786].</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1555156800">- Add patch: rsync-fix-prealloc-to-keep-file-size-0-when-possible.patch (boo#1108562)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1555329600">- Fixed bug numbers in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1631793600">- Fix a segmentation fault in iconv [bsc#1188258]
  * Add rsync-iconv-segfault.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637064000">- Fixed an error when using the external compression library
  where files larger that 1GB would not be transferred completely
  and failing with error:
  - deflate on token returned 0 (XXX bytes left)
  - rsync error: error in rsync protocol data stream (code 12)
  * Add rsync-fix-external-compression.patch [bsc#1190828]</changelog>
</package>
<package pkgid="5a9607b5dda8da890adcb920fe4e2dc860cfbd9fcf5e227d0b4fc4bbf1c9f93f" name="runc" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="27.1"/>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  (bsc#1193436)
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
</package>
<package pkgid="4088bd238c687455bf2c71a0527f6a373e77eddb80c641aec6dc984b31879917" name="salt" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="150300.53.7.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1626868800">- Do noop for services states when running systemd in offline mode (bsc#1187787)
- transactional_updates: do not execute states in parallel but use a queue (bsc#1188170)
- Handle "master tops" data when states are applied by "transactional_update" (bsc#1187787)
- Enhance openscap module: add "xccdf_eval" call
- virt: pass emulator when getting domain capabilities from libvirt
- Adding preliminary support for Rocky Linux
- Implementation of held/unheld functions for state pkg (bsc#1187813)
- Replace deprecated Thread.isAlive() with Thread.is_alive()
- Fix exception in yumpkg.remove for not installed package
- Fix save for iptables state module (bsc#1185131)
- virt: use /dev/kvm to detect KVM
- zypperpkg: improve logic for handling vendorchange flags
- Add bundled provides for tornado to the spec file
- Enhance logging when inotify beacon is missing pyinotify (bsc#1186310)
- Add "python3-pyinotify" as a recommended package for Salt in SUSE/OpenSUSE distros
- Fix tmpfiles.d configuration for salt to not use legacy paths (bsc#1173103)
- Detect Python version to use inside container (bsc#1167586) (bsc#1164192)
- Handle volumes on stopped pools in virt.vm_info (bsc#1186287)
- grains.extra: support old non-intel kernels (bsc#1180650)
- Fix missing minion returns in batch mode (bsc#1184659)
- Parsing Epoch out of version provided during pkg remove (bsc#1173692)
- Added:
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * backport-thread.is_alive-fix-390.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch</changelog>
  <changelog author="victor.zhestkov@suse.com" date="1630497600">- Fix wrong relative paths resolution with Jinja renderer when importing subdirectories
- Don't pass shell="/sbin/nologin" to onlyif/unless checks (bsc#1188259)
- Add missing aarch64 to rpm package architectures
- Backport of upstream PR#59492
- Fix failing unit test for systemd
- Fix error handling in openscap module (bsc#1188647)
- Better handling of bad public keys from minions (bsc#1189040)
- Define license macro as doc in spec file if not existing
- Add standalone formulas configuration for salt minion and remove salt-master requirement (bsc#1168327)
- Added:
  * fix-failing-unit-tests-for-systemd.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633694400">- Support querying for JSON data in external sql pillar
- Exclude the full path of a download URL to prevent injection of
  malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * 3002.2-postgresql-json-support-in-pillar-424.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637150400">- Use dnfnotify instead yumnotify for relevant distros
- Remove wrong _parse_cpe_name from grains.core
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- tar is required by minion on transactional-update system
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Fix traceback.*_exc() calls
- Added:
  * mock-ip_addrs-in-utils-minions.py-unit-test-444.patch
  * remove-wrong-_parse_cpe_name-from-grains.core-452.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * 3002.2-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * fix-traceback.-_exc-calls-429.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1643889600">- Fix inspector module export function (bsc#1097531)
- Add all ssh kwargs to sanitize_kwargs method
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * vendor-stateresult.patch
  * fix-inspector-module-export-function-bsc-1097531-480.patch
  * refactor-and-improvements-for-transactional-updates-.patch</changelog>
</package>
<package pkgid="1dc94bca718a564b98fd0df399cee3840e13a9888a300b46b37e5d317633861a" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="150300.53.7.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1626868800">- Do noop for services states when running systemd in offline mode (bsc#1187787)
- transactional_updates: do not execute states in parallel but use a queue (bsc#1188170)
- Handle "master tops" data when states are applied by "transactional_update" (bsc#1187787)
- Enhance openscap module: add "xccdf_eval" call
- virt: pass emulator when getting domain capabilities from libvirt
- Adding preliminary support for Rocky Linux
- Implementation of held/unheld functions for state pkg (bsc#1187813)
- Replace deprecated Thread.isAlive() with Thread.is_alive()
- Fix exception in yumpkg.remove for not installed package
- Fix save for iptables state module (bsc#1185131)
- virt: use /dev/kvm to detect KVM
- zypperpkg: improve logic for handling vendorchange flags
- Add bundled provides for tornado to the spec file
- Enhance logging when inotify beacon is missing pyinotify (bsc#1186310)
- Add "python3-pyinotify" as a recommended package for Salt in SUSE/OpenSUSE distros
- Fix tmpfiles.d configuration for salt to not use legacy paths (bsc#1173103)
- Detect Python version to use inside container (bsc#1167586) (bsc#1164192)
- Handle volumes on stopped pools in virt.vm_info (bsc#1186287)
- grains.extra: support old non-intel kernels (bsc#1180650)
- Fix missing minion returns in batch mode (bsc#1184659)
- Parsing Epoch out of version provided during pkg remove (bsc#1173692)
- Added:
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * backport-thread.is_alive-fix-390.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch</changelog>
  <changelog author="victor.zhestkov@suse.com" date="1630497600">- Fix wrong relative paths resolution with Jinja renderer when importing subdirectories
- Don't pass shell="/sbin/nologin" to onlyif/unless checks (bsc#1188259)
- Add missing aarch64 to rpm package architectures
- Backport of upstream PR#59492
- Fix failing unit test for systemd
- Fix error handling in openscap module (bsc#1188647)
- Better handling of bad public keys from minions (bsc#1189040)
- Define license macro as doc in spec file if not existing
- Add standalone formulas configuration for salt minion and remove salt-master requirement (bsc#1168327)
- Added:
  * fix-failing-unit-tests-for-systemd.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633694400">- Support querying for JSON data in external sql pillar
- Exclude the full path of a download URL to prevent injection of
  malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * 3002.2-postgresql-json-support-in-pillar-424.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637150400">- Use dnfnotify instead yumnotify for relevant distros
- Remove wrong _parse_cpe_name from grains.core
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- tar is required by minion on transactional-update system
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Fix traceback.*_exc() calls
- Added:
  * mock-ip_addrs-in-utils-minions.py-unit-test-444.patch
  * remove-wrong-_parse_cpe_name-from-grains.core-452.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * 3002.2-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * fix-traceback.-_exc-calls-429.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1643889600">- Fix inspector module export function (bsc#1097531)
- Add all ssh kwargs to sanitize_kwargs method
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * vendor-stateresult.patch
  * fix-inspector-module-export-function-bsc-1097531-480.patch
  * refactor-and-improvements-for-transactional-updates-.patch</changelog>
</package>
<package pkgid="5af94f03e2a0be7158ba6b5c52e09b2b0e3a507426e48d341728ea93cb234cac" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="150300.53.7.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1626868800">- Do noop for services states when running systemd in offline mode (bsc#1187787)
- transactional_updates: do not execute states in parallel but use a queue (bsc#1188170)
- Handle "master tops" data when states are applied by "transactional_update" (bsc#1187787)
- Enhance openscap module: add "xccdf_eval" call
- virt: pass emulator when getting domain capabilities from libvirt
- Adding preliminary support for Rocky Linux
- Implementation of held/unheld functions for state pkg (bsc#1187813)
- Replace deprecated Thread.isAlive() with Thread.is_alive()
- Fix exception in yumpkg.remove for not installed package
- Fix save for iptables state module (bsc#1185131)
- virt: use /dev/kvm to detect KVM
- zypperpkg: improve logic for handling vendorchange flags
- Add bundled provides for tornado to the spec file
- Enhance logging when inotify beacon is missing pyinotify (bsc#1186310)
- Add "python3-pyinotify" as a recommended package for Salt in SUSE/OpenSUSE distros
- Fix tmpfiles.d configuration for salt to not use legacy paths (bsc#1173103)
- Detect Python version to use inside container (bsc#1167586) (bsc#1164192)
- Handle volumes on stopped pools in virt.vm_info (bsc#1186287)
- grains.extra: support old non-intel kernels (bsc#1180650)
- Fix missing minion returns in batch mode (bsc#1184659)
- Parsing Epoch out of version provided during pkg remove (bsc#1173692)
- Added:
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * backport-thread.is_alive-fix-390.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch</changelog>
  <changelog author="victor.zhestkov@suse.com" date="1630497600">- Fix wrong relative paths resolution with Jinja renderer when importing subdirectories
- Don't pass shell="/sbin/nologin" to onlyif/unless checks (bsc#1188259)
- Add missing aarch64 to rpm package architectures
- Backport of upstream PR#59492
- Fix failing unit test for systemd
- Fix error handling in openscap module (bsc#1188647)
- Better handling of bad public keys from minions (bsc#1189040)
- Define license macro as doc in spec file if not existing
- Add standalone formulas configuration for salt minion and remove salt-master requirement (bsc#1168327)
- Added:
  * fix-failing-unit-tests-for-systemd.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633694400">- Support querying for JSON data in external sql pillar
- Exclude the full path of a download URL to prevent injection of
  malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * 3002.2-postgresql-json-support-in-pillar-424.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637150400">- Use dnfnotify instead yumnotify for relevant distros
- Remove wrong _parse_cpe_name from grains.core
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- tar is required by minion on transactional-update system
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Fix traceback.*_exc() calls
- Added:
  * mock-ip_addrs-in-utils-minions.py-unit-test-444.patch
  * remove-wrong-_parse_cpe_name-from-grains.core-452.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * 3002.2-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * fix-traceback.-_exc-calls-429.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1643889600">- Fix inspector module export function (bsc#1097531)
- Add all ssh kwargs to sanitize_kwargs method
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * add-all-ssh-kwargs-to-sanitize_kwargs-method-3002.2-.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * vendor-stateresult.patch
  * fix-inspector-module-export-function-bsc-1097531-480.patch
  * refactor-and-improvements-for-transactional-updates-.patch</changelog>
</package>
<package pkgid="6837be968ba70eb9cf6901f8035828191964bf8afb440e50cf45066906d875af" name="samba-client-libs" arch="x86_64">
  <version epoch="0" ver="4.15.4+git.324.8332acf1a63" rel="150300.3.25.3"/>
  <changelog author="scabrero@suse.de" date="1631188800">- Fix 'net rpc' authentication when using the machine account;
  (bsc#1189017); (bso#14796);</changelog>
  <changelog author="nopower@suse.com" date="1636027200">- Update to 4.13.13
  * rodc_rwdc test flaps;(bso#14868).
  * Backport bronze bit fixes, tests, and selftest improvements;
    (bso#14881).
  * Provide a fix for MS CVE-2020-17049 in Samba [SECURITY]
    'Bronze bit' S4U2Proxy Constrained Delegation bypass in Samba
    with embedded Heimdal;(bso#14642).
  * Python ldb.msg_diff() memory handling failure;(bso#14836).
  * "in" operator on ldb.Message is case sensitive;(bso#14845).
  * Fix Samba support for UF_NO_AUTH_DATA_REQUIRED;(bso#14871).
  * Allow special chars like "@" in samAccountName when generating
    the salt;(bso#14874).
  * Fix transit path validation;(bso#12998).
  * Prepare to operate with MIT krb5 &gt;= 1.20;(bso#14870).
  * rpcclient NetFileEnum and net rpc file both cause lock order
    violation: brlock.tdb, share_entries.tdb;(bso#14645).
  * Python ldb.msg_diff() memory handling failure;(bso#14836).
  * Release LDB 2.3.1 for Samba 4.14.9;(bso#14848).
- Update to 4.13.12
  * Address a signifcant performance regression in database access
    in the AD DC since Samba 4.12;(bso#14806).
  * Fix performance regression in lsa_LookupSids3/LookupNames4
    since Samba 4.9 by using an explicit database handle cache;
    (bso#14807).
  * An unuthenticated user can crash the AD DC KDC by omitting the
    server name in a TGS-REQ;(bso#14817).
  * Address flapping samba_tool_drs_showrepl test;(bso#14818).
  * Address flapping dsdb_schema_attributes test;(bso#14819).
  * An unuthenticated user can crash the AD DC KDC by omitting the
    server name in a TGS-REQ;(bso#14817).
  * Fix CTDB flag/status update race conditions(bso#14784).
- Update to 4.13.11
  * smbd: panic on force-close share during offload write;
    (bso#14769).
  * Fix returned attributes on fake quota file handle and avoid
    hitting the VFS;(bso#14731).
  * smbd: "deadtime" parameter doesn't work anymore;(bso#14783).
  * net conf list crashes when run as normal user;(bso#14787).
  * Work around special SMB2 READ response behavior of NetApp Ontap
    7.3.7;(bso#14607).
  * Start the SMB encryption as soon as possible;(bso#14793).
  * Winbind should not start if the socket path for the privileged
    pipe is too long;(bso#14792).</changelog>
  <changelog author="nopower@suse.com" date="1636027201">- CVE-2016-2124: don't fallback to non spnego authentication if we
  require kerberos; (bsc#1014440); (bso#12444).</changelog>
  <changelog author="nopower@suse.com" date="1636027202">- CVE-2020-25717: samba: A user on the domain can become root on
  domain members; (bsc#1192284); (bso#14556).
- CVE-2020-25721: auth: Fill in the new HAS_SAM_NAME_AND_SID
  values; (bsc#1192505); (bso#14564).
- CVE-2020-25718: An RODC can issue (forge) administrator tickets
  to other servers; (bsc#1192246);(bso#14558).
- CVE-2020-25719: samba: AD DC Username based races when no PAC
  is given;(bsc#1192247);(bso#14561).
- CVE-2020-25722: samba: AD DC UPN vs samAccountName not checked
  (top-level bug for AD DC validation issues);(bsc#1192283);
  (bso#14564).
- CVE-2021-3738: samba: crash in dsdb stack;(bsc#1192215);
  (bso#14468).
- CVE-2021-23192: samba: dcerpc requests don't check all fragments
  against the first auth_state;(bsc#1192214);(bso#14875).</changelog>
  <changelog author="scabrero@suse.de" date="1636545600">- Fix regression introduced by CVE-2020-25717 patches, winbindd
  does not start when 'allow trusted domains' is off; (bso#14899);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update to version 4.15.3; (jsc#SLE-23329);
  + CVE-2021-43566: Symlink race error can allow directory creation
    outside of the exported share; (bso#13979); (bsc#1139519);
  + CVE-2021-20316: Symlink race error can allow metadata read and
    modify outside of the exported share; (bso#14842); (bsc#1191227);
- Reorganize libs packages. Split samba-libs into samba-client-libs,
  samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba
  public libraries depending on internal samba libraries into these
  packages as there were dependency problems everytime one of these
  public libraries changed its version (bsc#1192684). The devel
  packages are merged into samba-devel.
- Rename package samba-core-devel to samba-devel
- Add python-rpm-macros to build requirements
- Update the symlink create by samba-dsdb-modules to private samba
  ldb modules following libldb2 changes from /usr/lib64/ldb/samba to
  /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="dimstar@opensuse.org" date="1642507200">- Use pkgconfig(krb5) as dependency for the -devel package: allow
  OBS to pick the right flavor of krb5-devel (full vs mini).
- Do not require the 'krb5' symbol by samba-client-libs: this
  package has an automatic dependency due to linkage on
  libgssapi_krb5.so.2. Automatic deps are always better.
- Do not require the 'krb5' symbol from samba-libs: samba-libs
  requires samba-client-libs, which in turn requires krb5
  libraries. Samba-libs itself has no need for krb5 (but get it
  indirectly anyway).</changelog>
  <changelog author="scabrero@suse.de" date="1642766400">- Update to 4.15.4
  * Duplicate SMB file_ids leading to Windows client cache
    poisoning; (bso#14928);
  * Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error -
    NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
  * kill_tcp_connections does not work; (bso#14934);
  * Can't connect to Windows shares not requiring authentication
    using KDE/Gnome; (bso#14935);
  * smbclient -L doesn't set "client max protocol" to NT1 before
    calling the "Reconnecting with SMB1 for workgroup listing"
    path; (bso#14939);
  * Cross device copy of the crossrename module always fails;
    (bso#14940);
  * symlinkat function from VFS cap module always fails with an
    error; (bso#14941);
  * Fix possible fsp pointer deference; (bso#14942);
  * Missing pop_sec_ctx() in error path inside close_directory();
    (bso#14944);
  * "smbd --build-options" no longer works without an smb.conf file;
    (bso#14945);</changelog>
  <changelog author="scabrero@suse.de" date="1643198400">- CVE-2021-44141: Information leak via symlinks of existance of
  files or directories outside of the exported share; (bso#14911);
  (bsc#1193690);
- CVE-2021-44142: Out-of-bounds heap read/write vulnerability
  in VFS module vfs_fruit allows code execution; (bso#14914);
  (bsc#1194859);
- CVE-2022-0336: Samba AD users with permission to write to an
  account can impersonate arbitrary services; (bso#14950);
  (bsc#1195048);</changelog>
</package>
<package pkgid="017ce0757b9247249b585cdceed11fe3cf3fcf9515d84f0817c759ae84f52a3e" name="sed" arch="x86_64">
  <version epoch="0" ver="4.4" rel="11.6"/>
  <changelog author="sbrabec@suse.cz" date="1358856000">- Update to version 4.2.2:
  * don't truncate input for lines of length 2^31 and longer
  * fix endless loop on incomplete multibyte sequences (bnc#743689)
  * -u also does unbuffered input
  * New command `F' to print current input file name
  * sed -i, s///w, and the `w' and `W' commands also obey the
  - -binary option
  * --posix fails for scripts that end in a backslash.
  * New option -z (--null-data) to separate lines by ASCII NUL.
  * \x26 (and similar escaped sequences) produces a literal &amp; in
    the replacement argument of the s/// command.
- Split lang package.
- Option to verify GPG signature.</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tcech@suse.cz" date="1401796800">- sed-dont_close_twice.patch (bnc#880817)
  when closing fails, file is attempted to be closed again
  patch based of Neil Brown's recommendation</changelog>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE</changelog>
  <changelog author="sbrabec@suse.com" date="1440504000">- Cherry picking of the most important fixes from the upstream sed
  GIT (not backporting testsuite, as it was completely refactored):
  * Fix y command in the RHS of a y/LHS/RHS/ transliteration
    (sed-y-NUL-RHS.patch).
  * Fix mishandling of overlapping address ranges
    (sed-fix-overlapping-address-ranges.patch).
  * Fix fail to remove a temporary file (sed-temp-delete.patch).
  * Fix behavior of --follow-symlinks when reading from stdin
    (bnc#933029, gnu#20795, sed-follow-symlinks-stdin.patch).
  * Make "sed --follow-symlinks -" consistent with "sed -" again,
    and process stdin instead of ./-
    (bnc#933029#c6, gnu#20796, sed-follow-symlinks-hyphen.patch).</changelog>
  <changelog author="schwab@linux-m68k.org" date="1441972800">- Build with ACL/SELinux support for in-place editing</changelog>
  <changelog author="mpluskal@suse.com" date="1483531200">- Update to version 4.3:
  * sed's regular expression matching is now typically 10x faster
  * sed now uses unlocked-io where available, resulting in faster
    I/O operations.
  * lots of bugfixes (for detailed list see NEWS)
- Drop patches (all upstreamed):
  * sed-fix-overlapping-address-ranges.patch
  * sed-follow-symlinks-hyphen.patch
  * sed-follow-symlinks-stdin.patch
  * sed-temp-delete.patch
  * sed-y-NUL-RHS.patch
- Spec file cleanups
  * run spec-cleaner
  * use macro for configure
  * execute tests with produced binary as well
  * use url for signature as well
  * use https for download links
  * use xs compressed tarballl
  * make building verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 4.4:
  * sed could segfault when invoked with specific combination of
    newlines in the input and regex pattern.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="sbrabec@suse.com" date="1617192000">- Build fix for the new glibc-2.31 (bsc#1183797,
  sed-tests-build-fix.patch).</changelog>
</package>
<package pkgid="7a1bb3ebedad01c2b0ec425b20ee2d18652274bc43e9a8b1a06a90f0d1a89754" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="20210716" rel="150300.11.1"/>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing
  here</changelog>
  <changelog author="jsegitz@suse.com" date="1626436800">- Update to version 20210716
- Remove interfaces for container module before building the package
  (bsc#1188184)
- Updated
  * fix_init.patch
  * fix_systemd_watch.patch
  to adapt to upstream changes</changelog>
  <changelog author="lnussel@suse.de" date="1628596800">- Fix quoting in postInstall macro</changelog>
  <changelog author="lnussel@suse.de" date="1629201600">- Allow systemd-sysctl to read kernel specific sysctl.conf
  (fix_kernel_sysctl.patch, boo#1184804)</changelog>
  <changelog author="ales.kedroutek@suse.com" date="1629720000">- Added policy module for rebootmgr (jsc#SMO-28)</changelog>
  <changelog author="jsegitz@suse.com" date="1629979200">- Properly label cockpit files
- Allow wicked to communicate with network manager on DBUS (bsc#1188331)</changelog>
  <changelog author="ales.kedroutek@suse.com" date="1630065600">- fix rebootmgr does not trigger the reboot properly (boo#1189878)
  * fix managing /etc/rebootmgr.conf
  * allow rebootmgr_t to cope with systemd and dbus messaging</changelog>
  <changelog author="jsegitz@suse.com" date="1633003200">- Fix auditd service start with systemd hardening directives (bsc#1190918)
  * add fix_auditd.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1633435200">- Add init_watch_unallocated_ttys.patch to fix services with
  StandardOutput=tty (bsc#1187313)</changelog>
  <changelog author="jsegitz@suse.com" date="1645444800">- Added fix_hypervkvp.patch to fix issues with hyperv labeling
  (bsc#1193987)</changelog>
</package>
<package pkgid="3c318853e1f7ad2a0f7a67fa044735101cd0989fcd37be61db5aa75300113742" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="20210716" rel="150300.11.1"/>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing
  here</changelog>
  <changelog author="jsegitz@suse.com" date="1626436800">- Update to version 20210716
- Remove interfaces for container module before building the package
  (bsc#1188184)
- Updated
  * fix_init.patch
  * fix_systemd_watch.patch
  to adapt to upstream changes</changelog>
  <changelog author="lnussel@suse.de" date="1628596800">- Fix quoting in postInstall macro</changelog>
  <changelog author="lnussel@suse.de" date="1629201600">- Allow systemd-sysctl to read kernel specific sysctl.conf
  (fix_kernel_sysctl.patch, boo#1184804)</changelog>
  <changelog author="ales.kedroutek@suse.com" date="1629720000">- Added policy module for rebootmgr (jsc#SMO-28)</changelog>
  <changelog author="jsegitz@suse.com" date="1629979200">- Properly label cockpit files
- Allow wicked to communicate with network manager on DBUS (bsc#1188331)</changelog>
  <changelog author="ales.kedroutek@suse.com" date="1630065600">- fix rebootmgr does not trigger the reboot properly (boo#1189878)
  * fix managing /etc/rebootmgr.conf
  * allow rebootmgr_t to cope with systemd and dbus messaging</changelog>
  <changelog author="jsegitz@suse.com" date="1633003200">- Fix auditd service start with systemd hardening directives (bsc#1190918)
  * add fix_auditd.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1633435200">- Add init_watch_unallocated_ttys.patch to fix services with
  StandardOutput=tty (bsc#1187313)</changelog>
  <changelog author="jsegitz@suse.com" date="1645444800">- Added fix_hypervkvp.patch to fix issues with hyperv labeling
  (bsc#1193987)</changelog>
</package>
<package pkgid="1803e8fc52f8e207e702ea6e1aa9c332759719f35e6e9f94da1c000718688c79" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="20210716" rel="150300.11.1"/>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Use tabrmd SELinux modules from tpm2.0-abrmd instead of storing
  here</changelog>
  <changelog author="jsegitz@suse.com" date="1626436800">- Update to version 20210716
- Remove interfaces for container module before building the package
  (bsc#1188184)
- Updated
  * fix_init.patch
  * fix_systemd_watch.patch
  to adapt to upstream changes</changelog>
  <changelog author="lnussel@suse.de" date="1628596800">- Fix quoting in postInstall macro</changelog>
  <changelog author="lnussel@suse.de" date="1629201600">- Allow systemd-sysctl to read kernel specific sysctl.conf
  (fix_kernel_sysctl.patch, boo#1184804)</changelog>
  <changelog author="ales.kedroutek@suse.com" date="1629720000">- Added policy module for rebootmgr (jsc#SMO-28)</changelog>
  <changelog author="jsegitz@suse.com" date="1629979200">- Properly label cockpit files
- Allow wicked to communicate with network manager on DBUS (bsc#1188331)</changelog>
  <changelog author="ales.kedroutek@suse.com" date="1630065600">- fix rebootmgr does not trigger the reboot properly (boo#1189878)
  * fix managing /etc/rebootmgr.conf
  * allow rebootmgr_t to cope with systemd and dbus messaging</changelog>
  <changelog author="jsegitz@suse.com" date="1633003200">- Fix auditd service start with systemd hardening directives (bsc#1190918)
  * add fix_auditd.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1633435200">- Add init_watch_unallocated_ttys.patch to fix services with
  StandardOutput=tty (bsc#1187313)</changelog>
  <changelog author="jsegitz@suse.com" date="1645444800">- Added fix_hypervkvp.patch to fix issues with hyperv labeling
  (bsc#1193987)</changelog>
</package>
<package pkgid="2c23ba252058d5169c85c3f5cb84765fdcf7b36691e5261ee91cdd0ad4348f78" name="selinux-tools" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150300.5.14"/>
  <changelog author="jsegitz@suse.com" date="1539777600">- Update to version 2.8 (bsc#1111732)
  For changes please see
  https://raw.githubusercontent.com/wiki/SELinuxProject/selinux/files/releases/20180524/RELEASE-20180524.txt
- ran spec-cleaner on spec files</changelog>
  <changelog author="jsegitz@suse.com" date="1546603200">- Remove unneeded build requires for python3 (bsc#1120255)</changelog>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add security_reject_unknown(3) man page
  * Change matchpathcon usage to match with matchpathcon manpage
  * Do not define gettid() if glibc &gt;= 2.30 is used
  * Fix RESOURCE_LEAK defects reported by coverity scan
  * Fix line wrapping in selabel_file.5
  * Do not dereference symlink with statfs in selinux_restorecon
  * Fix overly strict validation of file_contexts.bin
  * Fix selinux_restorecon() on non-SELinux hosts
  * Fix the whatis line for the selinux_boolean_sub.3 manpage
  * Fix printf format string specifier for uint64_t
  * Fix handling of unknown classes/perms
  * Set an appropriate errno in booleans.c
- Dropped python3.patch, is now upstream</changelog>
  <changelog author="mliska@suse.cz" date="1556193600">- Disable LTO (boo#1133244).</changelog>
  <changelog author="jsegitz@suse.com" date="1558699200">- Set License: to correct value (bsc#1135710)</changelog>
  <changelog author="jsegitz@suse.com" date="1559563200">- In selinux-ready
  * Removed check for selinux-policy package as we don't ship one
    (bsc#1136845)
  * Add check that restorecond is installed and enabled</changelog>
  <changelog author="jsegitz@suse.de" date="1573646400">- Added Use-Python-distutils-to-install-SELinux.patch to use
  Python's distutils instead of building and installing python
  bindings manually</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"
  Dropped Use-Python-distutils-to-install-SELinux.patch, included
  upstream</changelog>
  <changelog author="jsegitz@suse.de" date="1585224000">- Added skip_cycles.patch to skip directory cycles and not error
  out</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated</changelog>
</package>
<package pkgid="f5a5f2354e7fe605c937972da83f6764bebd4e81faa756f87c19cc5ea6a7bd26" name="sg3_utils" arch="x86_64">
  <version epoch="0" ver="1.44~763+19.1ed0757" rel="9.3.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- Use separate repository for SLE15</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Spec file: add fc_wwpn_id to generate by-path links for
  fibrechannel (bsc#1005063)
- Update to version 1.44~763+17.35f525b:
  * Changed versioning scheme (svn r763, pre-release of
    upstream 1.44, plus 16 SUSE patches, SUSE git commit b2fedfa)
  * Code-identical to previous release except for the following:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 1.44~763+19.1ed0757:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
  (bsc#840054, bsc#1131482)</changelog>
</package>
<package pkgid="0d8d7959632e5a8a7f06eb665c9b4166617db580806d8bfb15f864a365d10abf" name="shadow" arch="x86_64">
  <version epoch="0" ver="4.8.1" rel="150300.4.3.8"/>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
</package>
<package pkgid="2a331d598d48e99e3b66a2efc73ae8f8bbb0520cd53bcefeda484f449c1b5266" name="shared-mime-info" arch="x86_64">
  <version epoch="0" ver="1.12" rel="3.3.1"/>
  <changelog author="aplazas@suse.com" date="1505736000">- Update to version 1.9:
  + Add x-systemd-unit and x-dbus-service MIME types.
  + Fix magic for application/x-java-keystore on little endian.
  + Add mime-type for STL 3D models and GCODE.
  + Add application/x-executable as a supertype of
    application/ecmascript.
  + Add shebang magic for gjs JavaScript files.
  + Add a mimetype for Khronos texture files.
  + Add a mime-type for Famicom Disk System images.
  + Add "font" top level type, and use IANA registered type for
    TTF, OTF, WOFF, TTC and WOFF2.
  + Add OpenCL mime-type.
  + Add text/x-python3 content type.
  + Add Audible.com mime type.
  + Add application/x-atari-lynx-rom.
  + Add application/x-wonderswan-rom.
  + Add application/x-virtual-boy-rom.
  + Better JPEG 2000 MIME type support.
  + Add support for GIMP data files (.gbr, .gih, .pat).
  + Add an alias for Adobe Illustrator formats.
  + Add *.mjs glob for Javascript.
  + Rename application/x-trig to application/trig.
  + Rename Panasonic RAW image mime-types to image/x-panasonic-rw*.
  + Change the preferred suffix for image/x-tga from icb to tga.
  + Correct "PostScript" capitalisation.
  + Add mimetype for AppImage Type 2.
  + Remove AppImage glob with different casing.</changelog>
  <changelog author="sbrabec@suse.com" date="1507723200">- Drop obsolete mime-info-to-mime (boo#1062631).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.10:
  + Add mime-type for MJPEG raw streams
  + Add MPEG-4 Ringtone mime-type
  + Add mime-type for HEIF images
  + Add application/vnd.sqlite3, application/x-sqlite2 IANA types
  + Add application/pkcs8-encrypted
  + Add application/vnd.yotube.yt
  + Add audio/usac
  + Add mime-types for raw floppy disk images
  + Add aliases for SAP and HFE floppy image mime-types
  + Use new application/vnd.comicbook-rar IANA type</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 1.12:
  + Fix build from tarball.
- Changes from version 1.11:
  + Add mime-type for:
  - reStructuredText.
  - Groovy scripting language.
  - Gradle build tool.
  - Maven.
  - WarpScript source code.
  - zstd and tar.zst archives.
  + Change the preferred suffix for image/jpeg from .jpeg to .jpg.
  + Assign *.html to XHTML pages.
  + Better detection for *.key files (Apple Keynote vs. GPG keys).
  + Give weight to one of the appimage patterns.
  + Tools:
  - Link to GitLab for contributions and bug reports.
  - Loads of memory and file descriptor leak fixes.
  + Spec: Clarify the availability of C character escape support.
- Update URL and use source service to checkout exact tag, upstream
  have an ever changing tarball url, so we go with source checkout.
- Following the above, add libtool BuildRequires and pass
  autogen.sh, bootstraping is now needed.
- Modernize spec.</changelog>
  <changelog author="kukuk@suse.de" date="1555502400">- Move RPM macros file to correct directory in /usr</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574251200">- Drop no longer required PreReq's, obsolete with switch to file
  trigger based pre/post scripts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="qzhao@suse.com" date="1641902400">- Backport bsc1191630.patch: Jaroslav backporting 15fb9891
  glfo#xdg/shared-mime-info!81 to resolve nautilus can no longer
  launch apps when browsing files problem(glfo#xdg/shared-mime-info#11,
  bsc#1191630).</changelog>
</package>
<package pkgid="bc896445b66cb1879c98d373630dfa1840826ca06f4c1fb1901034be2051b80b" name="shim" arch="x86_64">
  <version epoch="0" ver="15.4" rel="4.7.1"/>
  <changelog author="jsegitz@suse.com" date="1617796800">- Add remove_build_id.patch to prevent the build id being added to
  the binary. That can cause issues with the signature</changelog>
  <changelog author="glin@suse.com" date="1617883200">- Add shim-bsc1184454-allocate-mok-config-table-BS.patch to avoid
  the error message during linux system boot (bsc#1184454)</changelog>
  <changelog author="jsegitz@suse.com" date="1619006400">- Update the SLE signatures</changelog>
  <changelog author="glin@suse.com" date="1619092800">- Enable the AArch64 signature check for SLE</changelog>
  <changelog author="glin@suse.com" date="1620302400">- Include suse-signed shim for AArch64 (bsc#1185621)</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621512000">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
  <changelog author="glin@suse.com" date="1624276800">- Split the keys in vendor-dbx.bin to vendor-dbx-sles and
  vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce
  the size of MokListXRT (bsc#1185261)
  + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz
- Add shim-bsc1185441-fix-handling-of-ignore_db-and-user_insecure_mode.patch
  to handle ignore_db and user_insecure_mode correctly
  (bsc#1185441, bsc#1187071)
- Add shim-bsc1185621-relax-max-var-sz-check.patch to relax the
  maximum variable size check for u-boot (bsc#1185621)
  + Also drop AArch64 suse-signed shim since we merged this patch
- Add shim-bsc1185261-relax-import_mok_state-check.patch to relax
  the check for import_mok_state() when Secure Boot is off.
  (bsc#1185261)
- Add shim-bsc1185232-relax-loadoptions-length-check.patch to
  ignore the odd LoadOptions length (bsc#1185232)
- shim-install: reset def_shim_efi to "shim.efi" if the given
  file doesn't exist
- Add shim-fix-aa64-relsz.patch to fix the size of rela sections
  for AArch64
  Fix: https://github.com/rhboot/shim/issues/371
- Add shim-disable-export-vendor-dbx.patch to disable exporting
  vendor-dbx to MokListXRT since writing a large RT variable
  could crash some machines (bsc#1185261)
- Add shim-bsc1187260-fix-efi-1.10-machines.patch to avoid the
  potential crash when calling QueryVariableInfo in EFI 1.10
  machines (bsc#1187260)
- Add shim-bsc1185232-fix-config-table-copying.patch to avoid
  buffer overflow when copying data to the MOK config table
  (bsc#1185232)</changelog>
  <changelog author="glin@suse.com" date="1625140800">- Add shim-bsc1187696-avoid-deleting-rt-variables.patch to avoid
  deleting the mirrored RT variables (bsc#1187696)</changelog>
  <changelog author="jsegitz@suse.com" date="1626350400">- Update the SLE signatures</changelog>
</package>
<package pkgid="767b3e98de9278cccdeddd9aba9f24eb065b628ac841f7b9717cff8f73752c43" name="slirp4netns" arch="x86_64">
  <version epoch="0" ver="0.4.7" rel="3.12.1"/>
  <changelog author="sgrunert@suse.com" date="1564660800">- Update to 0.3.1
  * Fix use-after-free</changelog>
  <changelog author="sgrunert@suse.com" date="1565006400">- Update to 0.3.2
  * Fix heap overflow in `ip_reass` on big packet input</changelog>
  <changelog author="sgrunert@suse.com" date="1565179200">- Add missing licenses to spec file</changelog>
  <changelog author="sgrunert@suse.com" date="1567080000">- Update to 0.3.3
  * Fix use-after-free in libslirp</changelog>
  <changelog author="sgrunert@suse.com" date="1567166400">- Update to 0.4.1
  * Support specifying netns path (slirp4netns --netns-type=path PATH
    TAPNAME)
  * Support specifying --userns-path
  * Vendor https://gitlab.freedesktop.org/slirp/libslirp (QEMU v4.1+)
  * Bring up loopback device when --configure is specified
  * Support sandboxing by creating a mount namespace
    (--enable-sandbox)
  * Support seccomp (--enable-seccomp)
- Add new build dependencies libcap-devel and libseccomp-devel</changelog>
  <changelog author="sgrunert@suse.com" date="1571659200">- Update to 0.4.2
  * Do not propagate mounts to the parent ns in sandbox</changelog>
  <changelog author="sgrunert@suse.com" date="1576670400">- Update to 0.4.3
  * api: raise an error if the socket path is too long
  * libslirp: update to v4.1.0: Including the fix for libslirp
    sends RST to app in response to arriving FIN when containerized
    socket is shutdown() with SHUT_WR
  * Fix create_sandbox error</changelog>
  <changelog author="rhafer@suse.com" date="1585310400">- Update to 0.4.4 (bsc#1167850)
  * libslirp: Update to v4.2.0:
  * New API function slirp_add_unix: add a forward rule to a Unix
    socket.
  * New API function slirp_remove_guestfwd: remove a forward rule
    previously added by slirp_add_exec, slirp_add_unix or
    slirp_add_guestfwd
  * New SlirpConfig.outbound_addr{,6} fields to bind output
    socket to a specific address
  * socket: do not fallback on host loopback if get_dns_addr()
    failed or the address is in slirp network
  * ncsi: fix checksum OOB memory access
  * tcp_emu(): fix OOB accesses
  * tftp: restrict relative path access
  * state: fix loading of guestfwd state</changelog>
  <changelog author="rhafer@suse.com" date="1588593600">- Update to 0.4.5 (bsc#1170940)
  * libslirp: update to v4.3.0:
  * Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594296000">- Update to 0.4.7 (bsc#1172380)
  * libslirp: update to v4.3.1 (Fix CVE-2020-10756)
  * Fix config_from_options() to correctly enable ipv6</changelog>
</package>
<package pkgid="da4015814b61d5df85a8cbc805718323cc0350d838db67b6ad75bbe54aba69c2" name="snapper" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="1.1"/>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
</package>
<package pkgid="edafa0dc27733a7c6a6298a2dcf4c02377ff4adb25a432d8eb250bdcdb85439d" name="socat" arch="x86_64">
  <version epoch="0" ver="1.7.3.2" rel="4.10"/>
  <changelog author="javier@opensuse.org" date="1414152000">- Add fix-linux-errqueue.h-not-found.patch</changelog>
  <changelog author="coolo@suse.com" date="1414238400">- correctly apply the patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1427284800">- Update to version 1.7.3.0
  * Too many changes to list; please read the CHANGES file for news
- Remove redundant %clean section
- Update fix-linux-errqueue.h-not-found.patch and socat-remove_date.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429012800">- remove socat-remove_date.patch, export BUILD_DATE instead
  (new feature since 1.7.2.4)
- run tests, don't abort yet
- require tcpd-devel only on SUSE systems at build time</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1429531200">- test-suite, use a small but safe subset of all tests
- don't remove "example" scripts from builddir, they are needed for
  tests</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1454414400">- update to 1.7.3.1, security fixes:
  * Socat security advisory 7 and MSVR-1499: "Bad DH p parameter in
    OpenSSL" (bnc#938913 and CVE-2015-4000).
  * Socat security advisory 8: "Stack overflow in arguments parser"
    (bnc#964844)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1491825600">- update to 1.7.3.2, bug fixes:
  * fixes uninterruptable hang / CPU loop on host resolution
    problems
  * some compile problems, and lots of other bugs and porting
    issues
- remove fix-linux-errqueue.h-not-found.patch, this build issue
  was fixed by upstream</changelog>
  <changelog author="meissner@suse.com" date="1502971200">- socat-openssl-1.1-tests.patch: make tests work on openssl1. (bsc#1042674)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517572800">- Add socat-ignore-tests-failure-boo1078346.patch
  flaky test failures PowerPC and s390 , bypass boo#1078346</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="966808e22cece0ec9783161d00a8a01c811aed481ac96f1d9e487dc8ca997751" name="squashfs" arch="x86_64">
  <version epoch="0" ver="4.4" rel="1.1"/>
  <changelog author="dmueller@suse.com" date="1453377600">- fix build for SLE12 and older</changelog>
  <changelog author="duwe@suse.com" date="1466078400">- Machines with 1024 processors or more reach the limit of maximum
  file descriptors (bsc#984136). Other limits apply that may be
  hit for no good reason. Simply limit the number of used threads
  to an arbitrary number, squashfs-thread-limit.</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor/makedev</changelog>
  <changelog author="dimstar@opensuse.org" date="1553083200">- Use / as sed command delimiter. Comma can actually show up in
  optflags (think -Wl,?), which then breaks the sed command line
  parsing.</changelog>
  <changelog author="dsterba@suse.cz" date="1553083201">- Use | instead of / that can be part of -L or -I options.</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133284).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1559736000">-  Add -offset function to skip n bytes at the beginning of the squashfs?
  https://github.com/plougher/squashfs-tools/commit/5a498ad24dcfeac9f3d747e894f22901f3ac10
  (0003-Add-offset-function-to-skip-n-bytes.patch)</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1571659200">- Version 4.4 - 2019-08-29:
  * Reproducible builds, new compressors,
  CVE fixes, security hardening and new options
  for Mksquashfs/Unsquashfs.
- Overall improvements:
  * Mksquashfs now generates reproducible images by default.
  * Mkfs time and file timestamps can also be specified.
  * Support for the Zstandard (ZSTD) compression algorithm.
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
- Mksquashfs improvements and major bug fixes:
  * Pseudo files now support symbolic links.
  * New -mkfs-time option.
  * New -all-time option.
  * New -root-mode option.
  * New -quiet option.
  * New -noId option.
  * New -offset option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, don't allow "/" pseudo filenames.
  * Bug fix, allow quoting of pseudo files, to
  better handle filenames with spaces.
  * Fix compilation with glibc 2.25+.
- Unsquashfs improvements and major bug fixes:
  * CVE-2015-4645 and CVE-2015-4646 have been fixed.
  * Unsquashfs has been further hardened against corrupted
  filestems.
  * Unsquashfs is now more strict about error handling.
  * New -ignore-errors option.
  * New -strict-errors option.
  * New -lln[umeric] option.
  * New -lc option.
  * New -llc option.
  * New -mkfs-time option.
  * New -UTC option.
  * New -offset option.
  * New -quiet option.
  * Update lz4 wrapper to use new functions introduced
  in 1.7.0.
  * Bug fix, fatal and non-fatal errors now set the exit
  code to 1.
  * Bug fix, fix time setting for symlinks.
  * Bug fix, try to set sticky-bit when running as a
  user process.
  * Fix compilation with glibc 2.25+.
- build changes:
  * re-created patches to fit squashfs 4.4
  * removed 0001-mksquashfs-fix-rare-race-in-fragment-waiting-in-file.patch
  (new version includes this change)
  * removed 0002-Fix-2GB-limit-of-the-is_fragment-.-function.patch
  (new version includes this change)
  * removed 0003-Add-offset-function-to-skip-n-bytes.patch
  (new version includes this change)
  * removed sysmacros.patch
  (new version includes this change)</changelog>
  <changelog author="mliska@suse.cz" date="1585656000">- Add -fcommon in order to fix boo#1160294.</changelog>
  <changelog author="bjoernv@arcor.de" date="1598961600">- enabled ZSTD compression support for openSUSE &gt;= 15.1</changelog>
</package>
<package pkgid="0268f7332b5e3cbfd5beac2e3021ccaaee20840c2a3714cd6f439e5d4372f4d6" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="b6a34fc479747de442c15992816fb84d855467abc2572fdaafdf7534ed52ac9d" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="1a379cf92eace468f1c17b250bbb9471dde1e91cda5d265fb27dd81cd3c38251" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="51e0d0dc9889148999c085fc36fa0d233af4562b6ae9047a576e8b16c8d874d2" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="150300.23.23.1"/>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628596800">- Add LDAPS support for the AD provider; (bsc#1183735);
  Add 0045-ldaps-for-ad-provider.patch
- Improve logs to record the reason why internal watchdog terminates
  a process; (bsc#1187120); Adds:
  * 0041-DEBUG-changed-timestamp-output-format.patch
  * 0042-DEBUG-introduce-new-SSSDBG_TRACE_LDB-level.patch
  * 0043-DEBUG-changed-debug_prg_name-format.patch
  * 0044-WATCHDOG-log-process-termination-to-the-journal.patch
- Fix watchdog not terminating tasks; (bsc#1187120);
  Add 0040-util-watchdog-fixed-watchdog-implementation.patch</changelog>
  <changelog author="scabrero@suse.de" date="1629201600">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0046-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631102400">- Fix a crash with newer libcares2 versions when the library fails
  to parse a dns name; (bsc#1190021); Add
  0047-RESOLV-handle-fail-of-ares_parse_-_reply-properly.patch</changelog>
  <changelog author="nopower@suse.com" date="1642248000">- Fix tests test_copy_ccache &amp; test_copy_keytab for later versions
  of krb5; (jsc#SLE-23329);
  - Add 0048-tests-fix-mocking-krb5_creds-in-test_copy_ccache.patch
  - Add 0049-tests-fix-enctypes-in-test_copy_keytab.patch
  - Add 0050-BUILD-Accept-krb5-1.17-for-building-the-PAC-plugin.patch
  - Add 0051-BUILD-Accept-krb5-1.19-for-building-the-PAC-plugin.patch
- Update spec file to requires newer ldb version
- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
</package>
<package pkgid="006d0a3c85020afd29b3a0669501d7860b4216ea8d0499f5dc90da6eb1f36cba" name="strace" arch="x86_64">
  <version epoch="0" ver="5.3" rel="1.44"/>
  <changelog author="schwab@suse.de" date="1533124800">- statx-redefinition.patch: Workaround incompatibility between
  &lt;sys/stat.h&gt; and &lt;asm/stat.h&gt;</changelog>
  <changelog author="jslaby@suse.com" date="1534248000">- Update to strace 4.24
  * Contains a fix for occasionally failing aio.gen.test
  * Improvements
  * Implemented decoding of kvm vcpu exit reason (-e kvm=vcpu option),
    requires Linux kernel version 4.16.0 or higher.
  * Implemented decoding of KVM_SET_CPUID2 and KVM_GET_*_CPUID ioctl commands.
- Remove statx-redefinition.patch (in upstream now)</changelog>
  <changelog author="schwab@linux-m68k.org" date="1540900800">- Update to strace 4.25
  * Improvements
  * Implemented decoding of KVM_CHECK_EXTENSION and NBD_* ioctl commands.
  * Implemented decoding of SOL_XDP socket option names.
  * Implemented decoding of AF_PACKET protocols in socket syscall.
  * Implemented decoding of AF_AX25 and AF_X25 addresses, protocols,
    and options.
  * Implemented stack trace printing on receiving signals.
  * Enhanced xlat styles support configured by -X option.
  * Enhanced decoding of IFLA_*, NETCONFA_*, and SMC_DIAG_* netlink attributes.
  * Wired up io_pgetevents syscall on arm, sparc, and sparc64.
  * Updated lists of AF_*, AUDIT_*, BPF_*, IFLA_*, IN_*, IPSTATS_*,
    IPV4_DEVCONF_*, NT_*, SCTP_*, SO_*, SOCK_*, SOL_*, and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 4.19.
  * Bug fixes
  * Fixed decoding of bit sets in evdev ioctl commands.
  * Fixed decoding of EVIOCGBIT(0, ...) ioctl commands.
  * Fixed test suite for the case when mlockall and unimplemented syscalls
    are explicitly disabled by a seccomp filter.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1545912000">- Update to strace 4.26
  * Changes in behavior
  * If strace is interrupted by a signal it handles (currently
    one of HUP, INT, QUIT, PIPE, or TERM), strace terminates
    itself with this signal.
  * Improvements
  * Implemented obtainment of system call information using
    PTRACE_GET_SYSCALL_INFO ptrace API.
  * Implemented decoding of PTRACE_GET_SYSCALL_INFO ptrace request.
  * Implemented decoding of BLKGETZONESZ, BLKGETNRZONES, and RND* ioctl
    commands.
  * Enhanced xlat styles support configured by -X option.
  * Enhanced internet address formatting in structureless contexts.
  * Enhanced decoding of getsockopt SO_ERROR option.
  * Enhanced error diagnostics when the first exec fails.
  * Added %net as a short form of %network in syscall specifications.
  * Updated lists of ABS_*, BPF_*, FAN_*, IFA_*, IFLA_*, KVM_CAP_*, NETLINK_*,
    NTF_*, PR_SPEC_*, REL_*, SOL_*, TCA_*, and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 4.20.
  * Enhanced manual page.
  * Bug fixes
  * Fixed "xlat_idx: Unexpected xlat value 0" warnings.
  * Fixed sthyi output format on s390.
  * Documented -X option in strace -h output.</changelog>
  <changelog author="jslaby@suse.com" date="1552392000">- disable test failing with kernel 5.0</changelog>
  <changelog author="schwab@suse.de" date="1552996800">- Update to strace 5.0
  * Changes in behavior
  * -D option now implies -I4
  * Diagnostic message is no longer printed if an attempt to restart a process
    has failed with ESRCH.
  * ASCII dump no longer tries to read the whole buffer at once.
  * Improvements
  * Changed the way tracees are handled: all pending tracees are now waited for
    before further processing, this improves fairness of tracee processing.
  * Enhanced xlat styles support configured by -X option.
  * Enhanced decoding of bpf syscall.
  * Enhanced pid formatting in strace-log-merge output.
  * Wired up kexec_file_load and rseq syscalls on aarch64, arc, metag, nios2,
    or1k, riscv, and tile architectures.
  * Updated lists of BPF_*, BTRFS_*, FAN_*, IFLA_*, KERN_*, KVM_CAP_*, NDA_*,
    NETNSA_*, NT_*, PR_*, REL_*, SECCOMP_*, SCTP_*, UDP_*, V4L2_*, and *_MAGIC
    constants.
  * Updated lists of ioctl commands from Linux 5.0.
  * Bug fixes
  * Fixed ordering of sockaddr_in6 fields.
  * Fixed strace-k test on alpha.
  * Fixed build on mips o32.
  * Fixed build on NOMMU architectures.
  * Fixed build in --with-libiberty=yes mode.
  * Fixed potential NULL dereference during printing of line continuation
    for syscalls that haven't been decoded.
  * Fixed strace-log-merge error diagnostics.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1556193600">- Ignore testsuite failures</changelog>
  <changelog author="schwab@suse.de" date="1558526400">- Update to strace 5.1
  * Bug fixes
  * Fixed decoding of last two arguments of clone syscall on riscv.
  * Improvements
  * Added C-SKY architecture support.
  * Implemented decoding of SO_TIMESTAMP*_NEW control messages.
  * Implemented decoding of clock_gettime64, clock_settime64, clock_adjtime64,
    clock_getres_time64, clock_nanosleep_time64, timer_gettime64,
    timer_settime64, timerfd_gettime64, timerfd_settime64, utimensat_time64,
    pselect6_time64, ppoll_time64, io_pgetevents_time64, recvmmsg_time64,
    mq_timedsend_time64, mq_timedreceive_time64, semtimedop_time64,
    rt_sigtimedwait_time64, futex_time64, sched_rr_get_interval_time64,
    pidfd_send_signal, io_uring_setup, io_uring_enter, and io_uring_register
    syscalls.
  * Enhanced decoding of bpf syscall.
  * Wired up getegid, geteuid, getppid, io_pgetevents, statfs64, and fstatfs64
    syscalls on alpha.
  * Wired up kexec_file_load and migrate_pages syscalls on arm.
  * Wired up io_pgetevents, perf_event_open, seccomp, and statx syscalls
    on ia64.
  * Wired up seccomp syscall on m68k.
  * Wired up statx syscall on sh.
  * Wired up pkey_mprotect, pkey_alloc, and pkey_free syscalls on alpha, hppa,
    ia64, m68k, s390, s390x, sh, sparc, and sparc64.
  * Wired up rseq syscall on alpha, hppa, ia64, m68k, sh, sparc, sparc64,
    and xtensa.
  * Wired up direct ipc syscalls on m68k, mips o32, powerpc, powerpc64,
    s390, s390x, sh, sparc, sparc64, and x86.
  * Updated lists of BPF_*, FAN_*, F_SEAL_*, IPV6_*, NT_*, PR_SPEC_*, SO_*,
    and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 5.1.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1562932800">- Update to strace 5.2 (boo#1149727)
  * Improvements
  * Implemented syscall return status filtering with -e status=set option
    and its aliases: -z (limit syscall printing to successful syscalls only)
    and -Z (limit syscall printing to failed syscalls only).
  * Implemented decoding of open_tree, move_mount, fsopen, fsconfig, fsmount,
    and fspick syscalls.
  * Enhanced decoding of bpf, clone, inotify_init, mbind, and set_mempolicy
    syscalls.
  * Updated lists of AT_*, AUDIT_*, BPF_*, CLONE_*, ETH_*, KEY_*, KVM_*, MPOL_*,
    TIPC_*, and V4L2_* constants.
  * Updated lists of ioctl commands from Linux 5.2.
  * Bug fixes
  * Fixed syscall tampering on powerpc, powerpc64, sparc, and sparc64 when
    PTRACE_GET_SYSCALL_INFO is in use.
  * Fixed build with cutting-edge toolchain.</changelog>
  <changelog author="schwab@suse.de" date="1569412800">- Update to strace 5.3
  * Improvements
  * Implemented usage of seccomp-bpf for stopping tracees only for filtered
    syscalls.  Use --seccomp-bpf option to enable.
  * Implemented decoding of pidfd_open and clone3 syscalls.
  * Enhanced decoding of io_cancel, io_submit, s390_sthyi, and syslog syscalls.
  * Enhanced decoding of NETLINK_ROUTE protocol.
  * Implemented decoding of UNIX_DIAG_UID netlink attribute.
  * Implemented decoding of WDIOC_* ioctl commands.
  * Enchanced syscall count statistics: overhead is now applied per-call,
    added ability for sorting on errors field.
  * Syscall delay injection and overhead values can now be supplied with
    time measure unit suffix and provided in IEEE 754 floating point format.
  * Updated lists of AUDIT_*, BPF_*, ETH_*, KEYCTL_*, KVM_*, MAP_*, SO_*, TCP_*, V4L2_*,
    XDP_*, and *_MAGIC constants.
  * Updated lists of ioctl commands from Linux 5.3.
  * Enhanced manual page.
  * Bug fixes
  * Fixed syscall tampering on arc, avr32, csky, ia64, m68k, metag, mips,
    nios2, or1k, riscv, s390, s390x, sparc, sparc64, and tile architectures
    when PTRACE_GET_SYSCALL_INFO is in use.
  * Fixed decoding of sockaddr_hci (AF_BLUETOOTH) addresses that lack
    hci_channel field.
  * Fixed evdev ioctl bitset decoding.
  * Fixed tests on alpha with Linux kernel headers 5.1+.
  * Portability
  * Removed support for decoding syscalls in range [1024...1079] on AArch64
    architecture as this range has never been implemented in mainline kernel
    releases.</changelog>
</package>
<package pkgid="397369231d523eb47a0a406b75dac119a6c64623415fbb56568485a94153b403" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.9.5p2" rel="150300.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1593432000">- Move python plugin support to own sub-package, we don't want
  python in a really minimal system [bsc#1173200]</changelog>
  <changelog author="info@paolostivanin.com" date="1595592000">- Update to 1.9.2:
  * The configure script now uses pkg-config to find the openssl cflags
    and libs where possible.
  * The contents of the log.json I/O log file is now documented in
    the sudoers manual.
  * The sudoers plugin now properly exports the sudoers_audit symbol
    on systems where the compiler lacks symbol visibility controls.
    This caused a regression in 1.9.1 where a successful sudo command
    was not logged due to the missing audit plugin. Bug #931.
  * Fixed a regression introduced in 1.9.1 that can result in crash
    when there is a syntax error in the sudoers file. Bug #934.
- Rebase sudo-sudoers.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1598356800">- This rpm packages decides about the permissions of /etc/sudoers.d</changelog>
  <changelog author="marco.varlese@suse.com" date="1599480000">- Modified the secure_path to include the other two default paths
  which are commonly available to $user. This will offer a better
  and more consistent UX.</changelog>
  <changelog author="kstreitova@suse.com" date="1605268800">- Update to 1.9.3p1
  * Fixed a regression introduced in sudo 1.9.3 where the configure
    script would not detect the crypt(3) function if it was present
    in the C library, not an additional library.
  * Fixed a regression introduced in sudo 1.8.23 with shadow passwd
    file authentication on OpenBSD.  BSD authentication was not
    affected.
  * Sudo now logs when a user-specified command-line option is
    rejected by a sudoers rule.  Previously, these conditions were
    written to the audit log, but the default sudo log file.  Affected
    command line arguments include -C (--close-from), -D (--chdir),
  - R (--chroot), -g (--group) and -u (--user).
- News in 1.9.3
  * Fixed building the Python plugin on systems with a compiler that
    doesn't support symbol hiding.
  * Sudo now uses a linker script to hide symbols even when the
    compiler has native symbol hiding support.  This should make it
    easier to detect omissions in the symbol exports file, regardless
    of the platform.
  * Fixed the libssl dependency in Debian packages for older releases
    that use libssl1.0.0.
  * Sudo and visudo now provide more detailed messages when a syntax
    error is detected in sudoers.  The offending line and token are
    now displayed.  If the parser was generated by GNU bison,
    additional information about what token was expected is also
    displayed.  Bug #841.
  * Sudoers rules must now end in either a newline or the end-of-file.
    Previously, it was possible to have multiple rules on a single
    line, separated by white space.  The use of an end-of-line
    terminator makes it possible to display accurate error messages.
  * Sudo no longer refuses to run if a syntax error in the sudoers
    file is encountered.  The entry with the syntax error will be
    discarded and sudo will continue to parse the file.  This makes
    recovery from a syntax error less painful on systems where sudo
    is the primary method of superuser access.  The historic behavior
    can be restored by add "error_recovery=false" to the sudoers
    plugin's optional arguments in sudo.conf.  Bug #618.
  * Fixed the sample_approval plugin's symbol exports file for systems
    where the compiler doesn't support symbol hiding.
  * Fixed a regression introduced in sudo 1.9.1 where arguments to
    the "sudoers_policy" plugin in sudo.conf were not being applied.
    The sudoers file is now parsed by the "sudoers_audit" plugin,
    which is loaded implicitly when "sudoers_policy" is listed in
    sudo.conf.  Starting with sudo 1.9.3, if there are plugin arguments
    for "sudoers_policy" but "sudoers_audit" is not listed, those
    arguments will be applied to "sudoers_audit" instead.
  * The user's resource limits are now passed to sudo plugins in
    the user_info[] list.  A plugin cannot determine the limits
    itself because sudo changes the limits while it runs to prevent
    resource starvation.
  * It is now possible to set the working directory or change the
    root directory on a per-command basis using the CWD and CHROOT
    options.  There are also new Defaults settings, runchroot and
    runcwd, that can be used to set the working directory or root
    directory on a more global basis.
  * New -D (--chdir) and -R (--chroot) command line options can be
    used to set the working directory or root directory if the sudoers
    file allows it.  This functionality is not enabled by default
    and must be explicitly enabled in the sudoers file.
- add sudo-1.9.3p1-pam_xauth.patch to stay setuid until just before
  executing the command. Fixes a problem with pam_xauth which
  checks effective and real uids to get the real identity of the
  user [bsc#1174593]</changelog>
  <changelog author="kstreitova@suse.com" date="1606737600">- Update to 1.9.4
  * The sudoers parser will now detect when an upper-case reserved
    word is used when declaring an alias.  Now instead of "syntax
    error, unexpected CHROOT, expecting ALIAS" the message will be
    "syntax error, reserved word CHROOT used as an alias name".
    Bug #941.
  * Better handling of sudoers files without a final newline.
    The parser now adds a newline at end-of-file automatically which
    removes the need for special cases in the parser.
  * Fixed a regression introduced in sudo 1.9.1 in the sssd back-end
    where an uninitialized pointer could be freed on an error path.
    GitHub issue #67.
  * The core logging code is now shared between sudo_logsrvd and
    the sudoers plugin.
  * JSON log entries sent to syslog now use "minimal" JSON which
    skips all non-essential whitespace.
  * The sudoers plugin can now produce JSON-formatted logs.  The
    "log_format" sudoers option can be used to select sudo or json
    format logs.  The default is sudo format logs.
  * The sudoers plugin and visudo now display the column number in
    syntax error messages in addition to the line number.  Bug #841.
  * If I/O logging is not enabled but "log_servers" is set, the
    sudoers plugin will now log accept events to sudo_logsrvd.
    Previously, the accept event was only sent when I/O logging was
    enabled.  The sudoers plugin now sends reject and alert events too.
  * The sudo logsrv protocol has been extended to allow an AlertMessage
    to contain an optional array of InfoMessage, as AcceptMessage
    and RejectMessage already do.
  * Fixed a bug in sudo_logsrvd where receipt of SIGHUP would result
    in duplicate entries in the debug log when debugging was enabled.
  * The visudo utility now supports EDITOR environment variables
    that use single or double quotes in the command arguments.
    Bug #942.
  * The PAM session modules now run when sudo is set-user-ID root,
    which allows a module to determine the original user-ID.
    Bug #944.
  * Fixed a regression introduced in sudo 1.8.24 in the LDAP back-end
    where sudoNotBefore and sudoNotAfter were applied even when the
    SUDOERS_TIMED setting was not present in ldap.conf.  Bug #945.
  * Sudo packages for macOS 11 now contain universal binaries that
    support both Intel and Apple Silicon CPUs.
  * For sudo_logsrvd, an empty value for the "pid_file" setting in
    sudo_logsrvd.conf will now disable the process ID file.
- Remove sudo-1.9.3p1-pam_xauth.patch (upstreamed)</changelog>
  <changelog author="kstreitova@suse.com" date="1608552000">- Update to 1.9.4p2
  * Fixed a bug introduced in sudo 1.9.4p1 which could lead to a crash
    if the sudoers file contains a runas user-specific Defaults entry.
    Bug #951.
- News in 1.9.4p1
  * Fixed a regression introduced in version 1.9.4 where sudo would
    not build when configured using the --without-sendmail option.
    Bug #947.
  * Fixed a problem where if I/O logging was disabled and sudo was
    unable to connect to sudo_logsrvd, the command would still be
    allowed to run even when the "ignore_logfile_errors" sudoers
    option was enabled.
  * Fixed a crash introduced in version 1.9.4 when attempting to run
    a command as a non-existent user.  Bug #948.
  * The installed sudo.conf file now has the default sudoers Plugin
    lines commented out.  This fixes a potential conflict when there
    is both a system-installed version of sudo and a user-installed
    version.  GitHub issue #75.
  * Fixed a regression introduced in sudo 1.9.4 where sudo would run
    the command as a child process even when a pseudo-terminal was
    not in use and the "pam_session" and "pam_setcred" options were
    disabled.  GitHub issue #76.
  * Fixed a regression introduced in sudo 1.8.9 where the "closefrom"
    sudoers option could not be set to a value of 3.  Bug #950.</changelog>
  <changelog author="kstreitova@suse.com" date="1610625600">- Update to 1.9.5.p1
  * Fixed a regression introduced in sudo 1.9.5 where the editor run
    by sudoedit was set-user-ID root unless SELinux RBAC was in use.
    The editor is now run with the user's real and effective user-IDs.
- News in 1.9.5
  * Fixed a crash introduced in 1.9.4 when running "sudo -i" as an
    unknown user.  This is related to but distinct from Bug #948.
  * If the "lecture_file" setting is enabled in sudoers, it must now
    refer to a regular file or a symbolic link to a regular file.
  * Fixed a potential use-after-free bug in sudo_logsrvd when the
    server shuts down if there are existing connections from clients
    that are only logging events and not session I/O data.
  * Fixed a buffer size mismatch when serializing the list of IP
    addresses for configured network interfaces.  This bug is not
    actually exploitable since the allocated buffer is large enough
    to hold the list of addresses.
  * If sudo is executed with a name other than "sudo" or "sudoedit",
    it will now fall back to "sudo" as the program name.  This affects
    warning, help and usage messages as well as the matching of Debug
    lines in the /etc/sudo.conf file.  Previously, it was possible
    for the invoking user to manipulate the program name by setting
    argv[0] to an arbitrary value when executing sudo. (bsc#1180687)
  * Sudo now checks for failure when setting the close-on-exec flag
    on open file descriptors.  This should never fail but, if it
    were to, there is the possibility of a file descriptor leak to
    a child process (such as the command sudo runs).
  * Fixed CVE-2021-23239, a potential information leak in sudoedit
    that could be used to test for the existence of directories not
    normally accessible to the user in certain circumstances.  When
    creating a new file, sudoedit checks to make sure the parent
    directory of the new file exists before running the editor.
    However, a race condition exists if the invoking user can replace
    (or create) the parent directory.  If a symbolic link is created
    in place of the parent directory, sudoedit will run the editor
    as long as the target of the link exists.  If the target of the
    link does not exist, an error message will be displayed.  The
    race condition can be used to test for the existence of an
    arbitrary directory.  However, it _cannot_ be used to write to
    an arbitrary location. (bsc#1180684)
  * Fixed CVE-2021-23240, a flaw in the temporary file handling of
    sudoedit's SELinux RBAC support.  On systems where SELinux is
    enabled, a user with sudoedit permissions may be able to set the
    owner of an arbitrary file to the user-ID of the target user.
    On Linux kernels that support "protected symlinks", setting
    /proc/sys/fs/protected_symlinks to 1 will prevent the bug from
    being exploited.  For more information see
    https://www.sudo.ws/alerts/sudoedit_selinux.html. (bsc#1180685)
  * Added writability checks for sudoedit when SELinux RBAC is in use.
    This makes sudoedit behavior consistent regardless of whether
    or not SELinux RBAC is in use.  Previously, the "sudoedit_checkdir"
    setting had no effect for RBAC entries.
  * A new sudoers option "selinux" can be used to disable sudo's
    SELinux RBAC support.
  * Quieted warnings from PVS Studio, clang analyzer, and cppcheck.
    Added suppression annotations for PVS Studio false positives.</changelog>
  <changelog author="sflees@suse.de" date="1611748800">- Update to 1.9.5.p2
  * When invoked as sudoedit, the same set of command line
    options are now accepted as for sudo -e. The -H and -P
    options are now rejected for sudoedit and sudo -e which
    matches the sudo 1.7 behavior. This is part of the fix for
    CVE-2021-3156.
  * Fixed a potential buffer overflow when unescaping backslashes
    in the command's arguments. Normally, sudo escapes special
    characters when running a command via a shell (sudo -s or
    sudo -i). However, it was also possible to run sudoedit with
    the -s or -i flags in which case no escaping had actually
    been done, making a buffer overflow possible.
    This fixes CVE-2021-3156. (bsc#1181090)
  * Fixed sudo's setprogname(3) emulation on systems that don't
    provide it.
  * Fixed a problem with the sudoers log server client where a
    partial write to the server could result the sudo process
    consuming large amounts of CPU time due to a cycle in the
    buffer queue. Bug #954.
  * Added a missing dependency on libsudo_util in libsudo_eventlog.
    Fixes a link error when building sudo statically.
  * The user's KRB5CCNAME environment variable is now preserved
    when performing PAM authentication. This fixes GSSAPI
    authentication when the user has a non-default ccache.</changelog>
  <changelog author="sflees@suse.de" date="1645012800">- Add support in the LDAP filter for negated users, patch taken
  from upstream (jsc#20068)
  * Adds sudo-feature-negated-LDAP-users.patch
- Restrict use of sudo -U other -l to people who have permission
  to run commands as that user (bsc#1181703, jsc#SLE-22569)
  * feature-upstream-restrict-sudo-U-other-l.patch</changelog>
</package>
<package pkgid="637bc755359be5915cdf4a6619e0ad79b5860b476661d13ff841497fb94ea3fb" name="supermin" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="1.7"/>
  <changelog author="cbosdonnat@suse.com" date="1464264000">- fate#316274</changelog>
  <changelog author="cbosdonnat@suse.com" date="1473336000">- Remove use of SuSE-release and use os-release instead. (bsc#997936)
  0001-add_simple_handling_of_os-release.patch
  0002-use_os-release_to_detect_the_distro.patch
  0003-tests_use__etc_os-release_in_test-harder.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1496145600">- Update to version 5.1.17
  remove 0001-add_simple_handling_of_os-release.patch
  remove 0002-use_os-release_to_detect_the_distro.patch
  remove 0003-tests_use__etc_os-release_in_test-harder.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1499947200">- Update to version 5.1.18</changelog>
  <changelog author="cbosdonnat@suse.com" date="1504180800">- Distro detection: also use ID_LIKE to catch suse distros
  add patch: suse_release.patch</changelog>
  <changelog author="ldewey@suse.com" date="1557230400">- Added tar as software dependency.
  (BSC#1134334)</changelog>
  <changelog author="ldewey@suse.com" date="1564574400">- Adding sysconfig-netconfig to list of required dependencie
  (BSC#136878)</changelog>
  <changelog author="ohering@suse.de" date="1572609600">- Update to version 5.1.20, via _service file
  No changelog provided by upstream</changelog>
  <changelog author="dmueller@suse.com" date="1603454400">- update to 5.2.0:
  * rpm: extend the Multiple_matches exception
  * Use external command mv to rename old output directory (RHBZ#1670191).
  * rpm: do not unpack parameters
  * rpm: fix version comparison
  * rpm: provide a dummy supermin_rpm_get_arch implementation
  * ext2: Build symbolic links correctly (RHBZ#1770304).
  * Update gnulib to latest.
- switch to release tarball, use keyring for gpg validation
- run tests</changelog>
  <changelog author="ro@suse.de" date="1612526400">- add patch supermin-kernel_version_compressed.patch
  find kernel module path even for compressed kernels
  like on aarch64 and s390x (bsc#1182112, bsc#1138258)</changelog>
</package>
<package pkgid="115a0a4761f877987f3780786878c7427a067ef0d8d4fcceed588ad5ecfe7e81" name="supportutils" arch="noarch">
  <version epoch="0" ver="3.1.17" rel="7.35.5.1"/>
  <changelog author="kukuk@suse.com" date="1614772800">- Remove net-tools from requires, it does not contain any tool
  anymore used by supportutils pr#96</changelog>
  <changelog author="jason.record@gmail.com" date="1615464000">- Fixed mismatched taint flags (bsc#1178491)
- Removed redundant fdisk code that can cause timeout issues (bsc#1181679)
- Supportconfig processes -f without hanging (bsc#1182904)</changelog>
  <changelog author="jason.record@gmail.com" date="1616414400">- [powerpc] Collect dynamic_debug log files for ibmvNIC #98 (bsc#1183826)</changelog>
  <changelog author="jason.record@suse.com" date="1618488000">- Additions to version 3.1.15
  + Added drbd-overview to drbd.txt
  + Added list-timers to systemd.txt (bsc#1169348)
  + Including nfs4 in search (bsc#1184829)
- Minor: Fix a typo (executible -&gt; executable) #99
- Changed minor wording to loaded module</changelog>
  <changelog author="jason.record@suse.com" date="1618833600">- Additions to version 3.1.15
  + Checks package signatures in rpm.txt (bsc#1021918)
  + Optimize find (bsc#1184912)
- Using zypper --xmlout (bsc#1181351)
- Error fix for sysfs.txt (bsc#1089870)</changelog>
  <changelog author="jason.record@suse.com" date="1620820800">- getappcore checks for valid compression binary (bsc#1185991)
- getappcore does not trigger errors with help message (bsc#1185993)</changelog>
  <changelog author="jason.record@suse.com" date="1621857600">- analyzevmcore supports local directories (bsc#1186397)</changelog>
  <changelog author="jason.record@suse.com" date="1622116800">- Fixes to supportconfig
  + Exclude rhn.conf from etc.txt (bsc#1186347)</changelog>
  <changelog author="jason.record@suse.com" date="1623067200">- Changes to version 3.1.16
  + lsof options to improve performance (bsc#1186687)</changelog>
  <changelog author="jason.record@suse.com" date="1625572800">- Changes to version 3.1.17
  + Adding ethtool options g l m to network.txt (jsc#SLE-18240)</changelog>
</package>
<package pkgid="6e80c5a5a7e3a8fb547b9fce4f0e918cfe6f3504254716493e5e8d209b4b013b" name="suse-build-key" arch="noarch">
  <version epoch="0" ver="12.0" rel="8.19.1"/>
  <changelog author="meissner@suse.com" date="1412251200">- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team &lt;security@suse.de&gt;
  bnc#899509</changelog>
  <changelog author="ro@suse.de" date="1480420800">- use dumpsigs script from openSUSE to merge code</changelog>
  <changelog author="meissner@suse.com" date="1481112000">- extend the build@suse.de product key. (bsc#1014151)
  pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key &lt;build@suse.de&gt;</changelog>
  <changelog author="meissner@suse.com" date="1522238400">- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)</changelog>
  <changelog author="meissner@suse.com" date="1542110400">- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)</changelog>
  <changelog author="meissner@suse.com" date="1583928000">- created a new security@suse.de communication key (bsc#1166334)</changelog>
  <changelog author="meissner@suse.com" date="1587643200">- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1597320000">- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)</changelog>
  <changelog author="meissner@suse.com" date="1600689600">- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -&gt; gpg-pubkey-39db7c82-5f68629b.asc</changelog>
  <changelog author="meissner@suse.com" date="1645099200">- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)</changelog>
</package>
<package pkgid="98357d3231e937176e8a1a17b055c194e785c3e9fc7a09ed4b83092b5a1e976a" name="suse-module-tools" arch="x86_64">
  <version epoch="0" ver="15.3.15" rel="3.17.1"/>
  <changelog author="mwilck@suse.com" date="1619092800">- Update to version 15.3.6:
  * dm-crypt requires essiv in SLE15 SP3 (boo#1183063 bsc#1184134 ltc#192244).</changelog>
  <changelog author="mwilck@suse.com" date="1623931200">- Update to version 15.3.7:
  * Fix treatment of compressed modules (bsc#1187093)</changelog>
  <changelog author="mwilck@suse.com" date="1625572800">- Update to version 15.3.8:
  * modprobe.d: Remove dma=none setting for parport_pc
    (bsc#1177695)</changelog>
  <changelog author="mwilck@suse.com" date="1629374400">- Update to version 15.3.9:
  * fix problem that initrd may not be rebuilt after installing
    kernel-$flavor-extra (bsc#1189441)</changelog>
  <changelog author="mwilck@suse.com" date="1633089600">- Update to version 15.3.10:
  * Import kernel scriptlets from kernel-source
    (bsc#1189841, bsc#1190598)
  * Provide "suse-kernel-rpm-scriptlets"</changelog>
  <changelog author="mwilck@suse.com" date="1633348800">- Update to version 15.3.11:
  * inkmp-script(postun): don't pass  existing files to weak-modules2
    (boo#1191200)
  * kernel-scriptlets: skip cert scriptlet on non-UEFI systems
    (boo#1191260)</changelog>
  <changelog author="mwilck@suse.com" date="1634904000">- Update to version 15.3.12:
  * rpm-script: fix bad exit status in OpenQA (bsc#1191922)
  * cert-script: Ignore kernel keyring for kernel certificates (bsc#1191480).</changelog>
  <changelog author="mwilck@suse.com" date="1634904001">- Update to version 15.3.13:
  * fixup "rpm-script: fix bad exit status in OpenQA (bsc#1191922)"</changelog>
  <changelog author="mwilck@suse.com" date="1635336000">- Update to version 15.3.14:
  * add commit which was missing by mistake:
  * cert-script: Deal with existing $cert.delete file (bsc#1191804).</changelog>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to version 15.3.15:
  * blacklist isst_if_mbox_msr (bsc#1187196)</changelog>
</package>
<package pkgid="2d40e7cc18ee8806226dc5fe2a8b9eae7b60ccdddcf7ddd6502a4a29ad91ac77" name="suseconnect-ng" arch="x86_64">
  <version epoch="0" ver="0.0.6~git9.33e5847" rel="150300.1.1"/>
  <changelog author="jzerebecki@suse.com" date="1626091200">- Update to version 0.0.1~git0.a5f168a:
  * Add JSONError and cleanup error handling</changelog>
  <changelog author="jzerebecki@suse.com" date="1626696000">- Update to version 0.0.1~git16.8a5d48c:
  * Add extensions hints for readonly root fs
  * Make the connect package an internal package
  * Document debug output destination difference
  * Add status value constants
  * Add rollback CLI option
  * Fix callHTTP() so connections are reused
  * Fix list-extensions format
  * Fix error from zypper refresh</changelog>
  <changelog author="jzerebecki@suse.com" date="1626955200">- Update to version 0.0.1~git33.b531281:
  * Run integration tests
  * Try to use localized error from server response
  * Write usage help to stdout like the Ruby version
  * Simplify list-extensions template
  * Fix call to create UUID on s390
  * Provides and Obsoletes SUSEConnect
  * Add extensions list tests
  * Fix calls to s390 read_values
  * Add build-s390 target to Makefile
  * hwinfo: don't fail if dmidecode is missing</changelog>
  <changelog author="jzerebecki@suse.com" date="1627041600">- Update to version 0.0.2~git0.ebef3b7:
  * Add --version
  * Fix list-extensions printing "Not available" when using SCC
  * Change --deregister to --de-register</changelog>
  <changelog author="jzerebecki@suse.com" date="1627387200">- Update to version 0.0.3~git0.dacdd3b:
  * Add gofmt target to Makefile
  * Fix gofmt errors
  * Add Requires that weren't explicit (bsc#1188646)
  * Use custom UnmarshalJSON() for the Product struct</changelog>
  <changelog author="jzerebecki@suse.com" date="1630065600">- Update to version 0.0.3~git9.19e761b:
  * Add zypper-migration-plugin to package
  * Remove unused Error logger
  * Add missing doc strings to exported vars and funcs
  * Handle error after products sync api call
  * Make the CI check gofmt</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1638360000">- Update to version 0.0.4~git0.64b80e9:
  * Makefile: also run tests under ./suseconnect
  * Switch yast-test to upstream
  * Removed examples leftover from the POC phase
  * Add HA repo to get rubygem(ffi) before it's in the baseproduct
  * Add versions and lib deps
  * Post-review cleanup
  * Package libsuseconnect and shim
  * Align with yast-registration tests
  * Fix SSLCertificate mixins
  * Fix logger crash and restore mixin
  * Removed TODO item handled separately
  * Enable debug early
  * Add package search for YaST's "Online Search"
  * Clarify Repo fields
  * Export UpdateSystem()
  * Export SystemActivations()
  * Add migration functions
  * Fix handling of IsBase attribute
  * Add missing JSONError
  * Add list_installer_updates
  * Add "update certificates"
  * Add more specific errors
  * Improved SSL error handling
  * Init defaults for get_config()
  * Improved debug logging
  * Fix error scopes
  * Fix ApiError interface
  * Added DEFAULT_CREDENTIALS_DIR const
  * get proxy credentials from curlrc
  * Forward logs from Connect to YaST
  * Separate Info logger
  * Added more TODO items
  * Simplify Config object init
  * Map Repo and Config fields to JSON
  * Add remaining fields listed in addon.rb
  * Add product_type field to product
  * First working yast part
  * Add relative path support to credentials
  * Add steps to test from yast
  * Add yast create_credentials_file
  * Add CreateCredentials() method
  * Add yast credentials()
  * Add yast announce_system - WIP
  * Add MergeJSON method for Config
  * Add readme for YaST integration
  * Fix usage text
  * Add missing -g argument
  * Fix OBS CI, it now requires target
  * Add manpage placeholder
  * Simplify packageWanted()
  * Add sorting and grouping options
  * Add local repo search and duplicate removal
  * Add basic online package search
  * Update rpm spec for zypper-search-packages-plugin
  * Add CLI for zypper search-packages plugin
  * Optional base product in package search
  * Use DefaultTransport defaults + client timeout
  * Extract ReleaseType from zypper output
  * Print failed command on zypper error like the Ruby
  * Add package_search API wrapper
  * Allow de-register/de-activate a single product
  * Improve docstring for the Status struct
  * Always show subscription information if available
  * Refactor getStatuses() to ease testing
  * Add SUMA/Uyuni check
  * Fix status output order to follow zypper product xml
  * Change GetExtensionsList() to reduce calls
  * Add the subscription name to status output
  * allow --instance-data together with --regcode
  * Post-review cleanups
  * Add selfupdate functionality
  * Handle Leap -&gt; SLES migration scenario
  * Add offline migrations support
  * Change parse error string and add block comment
  * Add disabling of obsolete repos
  * Add zypper repos listing
  * Add interactive migration selection
  * Allow loading Config from any path
  * Remove dummy flag
  * Add snapper support
  * Add zypper backup/restore functions
  * Use connect.StringSet
  * Add --query option
  * Add product and break-my-system options
  * Add note on conflicting flags
  * Check for flag contradictions
  * Add echoing output of executed commands to console
  * Move product printing out of checkProducts()
  * Split --debug and --verbose
  * Add zypper dist-upgrade part
  * Split migration code
  * Extract migration sorting
  * Expose migration(Add|Remove)Service() functions
  * Trap SIGINT/SIGTERM
  * Add zypper.RefreshRepos()
  * Expose client.upgradeProduct()
  * Add --root parameter
  * Add --migration N parameter
  * Prepare available migrations
  * Add API call to get online migration paths
  * Add system products checking
  * Add quiet logger for easier --quiet handling
  * Add zypper migration plugin implementation.
  * Export toTriplet and installReleasePackage
  * Add basic string set implementation
  * Remove quiet param from execute() and zypperRun()
  * Simplify mocking of external commands</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1641556800">- Update to version 0.0.5~git0.bbb5544:
  * Switch from rubygem-ffi to fiddle
  * Cleanup services during migration (bsc#1161891)
  * Allow non-root users to see usage text
  * Add option to not fail dup as much
  * Move APIVersion declaration to file where it is used
  * Add flag to enable/disable hwinfo test
  * Add ARM cluster count to hwinfo and fix test
  * Simplify parsing JSON error response
  * Add --gpg-auto-import-keys for zypper ref
  * Rename main.go to logging.go
  * Fix typo
  * Remove init() from the connect package
  * Move CFG variable declaration to config.go
  * Move AppName const to the file where it is used
  * Use testing.Helper() in test helpers
  * Add ppc64le support
  * Disable UUID test
  * Add test tools to BuildRequires
  * Ignore UUID errors
  * Run basic hwinfo sanity test on build service
  * Update code comments to match shim behavior.
  * Remove dependency on systemd
  * Only run httputil DumpResponse when needed</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1643198400">- Update to version 0.0.6~git0.77933db:
  * Add man pages
  * Add note in DIFFERENCES.md about abbreviated flags
  * Add -l as an alias for --list-extensions
  * Add --clean as an alias for --cleanup (bsc#1195003)
  * Suppress expected error log message in TLS test
  * Add flag to import product repo keys (bsc#1174657)</changelog>
  <changelog author="jan.suse@zerebecki.de" date="1646136000">- Update to version 0.0.6~git9.33e5847:
  * Delegate free() calls back to Go (bsc#1195729)
  * Pass "insecure" to zypper addservice
  * Workaround system cert reloading after import (bsc#1195220)
  * Extract setupHTTPClient for easier reuse
  * Exit with code 64 on connection refused like Ruby</changelog>
</package>
<package pkgid="839957ad499f704d20107c4dfd5e9bf3e46f5cea8dae637dfd477f10d161efb9" name="swtpm" arch="x86_64">
  <version epoch="0" ver="0.5.2" rel="1.20"/>
  <changelog author="glin@suse.com" date="1578052800">- Amend swtpm-adjust-seccomp-path.patch to add the missing seccomp
  paths
- Adjust the conditional check of net-tools-deprecated for SLE15
  and SLE15-SP1</changelog>
  <changelog author="glin@suse.com" date="1587556800">- Update to 0.3.1
  + swtpm: Fix vtpm proxy case without startup flags
  + swtpm: Only call memcpy if tocopy != 0 (coverity)
  + man: Document new startup options and capabilities
    advertisement
  + swtpm: Enable sending startup commands before processing
    commands
  + swtpm_cert: Accept serial numbers that use up to 64bits
  + swtpm_cert: Use getopt_long_only to parse options
  + swtpm_cert: Add support for --print-capabilities option
  + swtpm_cert: Allow passing signing key and parent key via new
    option
  + swtpm_setup: Enable spaces in paths and other variables
  + swtpm_ioctl: Calculate strlen(input) only once
  + swtpm_ioctl: Block SIGPIPE so we can get EPIPE on write()
  + swtpm_bios: Block SIGPIPE so we can get EPIPE on write()
  + swtpm: Only accept() new client ctrl connection if we have none
  + swtpm_setup: Do not fail on future PCR banks' hashes
  + swtpm_setup: Use 1st part of SWTPM_EXE/SWTPM_IOCTL to determine
    executable
  + swtpm_setup: Keep reserved range of file descriptors for
    swtpm_setup.sh
  + swtpm_setup: Log about encryption and fix c&amp;p error in err msg
  + swtpm: Add --print-capabilities to help screen of
    'swtpm chardev'
  + swtpm_ioctl: Fix uninitialized variable 'pgi'
  + swtpm_cert: Use gnutls_x509_crt_get_subject_key_id API call for
    subj keyId
  + swtpm_cert: Fix OIDs for TPM 2 platforms data
  + swtpm: Fix typo in error report: HMAC instead of hash
  + swtpm: Use writev_full rather than writev; fixes --vtpm-proxy
    EIO error
- Refresh swtpm-setup-tcsd-path.patch</changelog>
  <changelog author="kai.liu@suse.com" date="1594468800">- Update to 0.3.2:
  + swtpm:
    + Remove unnecessary #include &lt;seccomp.h&gt; (fixes SuSE build)
    + Make coverity happy by handling default case in case
    statement
  + swtpm_setup:
    + bugfix: Create ECC storage primary key in owner hierarchy
    + bugfix: remove tpm2_stirrandom and tpm2_changeeps
  + tests:
    + Adjusted pcrUpdateCounter in tests to succeed with PCR TCB
    group fixes in libtpms TPM 2 code</changelog>
  <changelog author="kai.liu@suse.com" date="1596110400">- Update to version 0.3.3:
  * swtpm_setup:
  - openSUSE: Support tcsd configuration where tss user != tss group,
    such as root/tss; Fedora &amp; Ubuntu for example use tss/tss
  * build-sys:
  - Check whether tss user and group are available
- Add tss user &amp; group build flags per upstream instruction. This
  together with v0.3.3 fixed the bug with TPM 1.2 emulation.
  Related upstream bug:
    https://github.com/stefanberger/swtpm/issues/284</changelog>
  <changelog author="kai.liu@suse.com" date="1597320000">- Update to version 0.3.4:
  * swtpm:
  - Fix compilation for cygwin
  * swtpm_setup &amp; swtpm-localca:
  - Get rid of bash's eval when invoking external tools to avoid abuse.
    Only use eval for 'resolving' variables.
  * tests:
  - Various fixes of minor issues</changelog>
  <changelog author="kai.liu@suse.com" date="1602590400">- Update Requires and BuildRequires for changes since 0.4.0.
- Remove patch files that are no longer needed:
  * swtpm-adjust-seccomp-path.patch
  * swtpm-setup-tcsd-path.patch
  * swtpm-tpm-tools-path.patch
- Update to version 0.5.0
  * swtpm:
  - Write files atomically using a temp file and then renaming
  * swtpm_setup:
  - Removed remaining 'c' wrapper program
  - Do not truncate logfile when testing write-access (regression)
  - Remove TPM state file in case error occurred
  * swtpm-localca:
  - Rewrite in python
  - Allow passing pkcs11 PIN using signingkey_password
  - Allow passing environment variables needed for pkcs11 modules using
    swtpm-localca.conf and format 'env:VARNAME=VALUE'.
  * build-sys:
  - Add python-install and python-uninstall targets
  - Add configure option to disable installation of Python module
  - Use -Wl,-z,relro and -Wl,-z,now only when linking (clang)
  - Use AC_LINK_IFELSE to check whether support for hardening flags
- Changes from version 0.4.1
  * swtpm_setup:
  - Do not hardcode '/etc' but use SYSCONFDIR
  - Fix support for -h and -? options
  - Add missing .config path when using ${HOME}
  * swtpm-localca:
  - Apply password for signing key when creating platform cert
  - Properly apply passwords for localca signing key
- Changes from version 0.4.0
  * swtpm:
  - Invoke print capabilities after choosing TPM version
  - Add some recent syscalls to seccomp blacklist
  * swtpm_cert:
  - Support --ecc-curveid option to pass curve id
  * swtpm_setup &amp; related scripts:
  - Rewrite swtpm_setup.sh in python with TPM 1.2 not requiring tcsd
    and TPM tools anymore; new dependencies:
  - python3: pip, cryptography, setuptools
    dropped dependencies for swtpm_setup:
  - tcsd, expect, tpm-tools (some still needed for pkcs11 tests)
  - Added support for RSA 3072 keys (for libtpms-0.8.0) and moved to
    ECC NIST P384 curve; default RSA key size is still 2048
  - Added support for --rsa-keysize option
  - Extend script to create a CA using a TPM 2 for signing
  * tests:
  - Use the IBM TSS2 v1.5.0's test suite
  - Add test case for loading of an NVRAM completely full with keys
  - Have softhsm_setup use temporary directory for softhsm config &amp; state
  - various other improvements
  * man pages:
  - Improvements
  * build-sys:
  - clang: properly test for linker flag 'now' and 'relro'
  - Gentoo: explicitly link libswtpm_libtpms with -lcrypto
  - Ownership of /var/lib/swtpm-localca is now tss:root and
    mode flags 0750.</changelog>
  <changelog author="kai.liu@suse.com" date="1606046400">- Update to version 0.5.1
  * swtpm &amp; swtpm_setup:
  - Addressed potential symlink attack issue (CVE-2020-28407)
  * build-sys:
  - Fix configure python cryptography error message
- Misc. spec file changes.</changelog>
  <changelog author="glin@suse.com" date="1608638400">- Create /var/lib/swtpm-localca to store the keys created by
  swtpm-localca (bsc#1179811)
- Replace net-tools-deprecated with iproute2 since the scripts in
  swtpm now can use 'ss' instead of 'netstat'</changelog>
  <changelog author="glin@suse.com" date="1608638401">- Use "Requires user(tss)" for the "tss" user and group</changelog>
  <changelog author="meissner@suse.com" date="1609070400">- Update to version 0.5.2
  - swtpm:
  - Fix potential buffer overflow related to largely unused data hashing
    function in control channel
  - swtpm: Unconditionally close fd if writing of pidfile fails (coverity)
  - swtpm_setup:
  - Increase timeout from 10s to 30s for slower machines
  - Travis:
  - Not building on OS X anymore due to additional costs</changelog>
</package>
<package pkgid="fe53bfa38d6d3a03933211189aa98d494ce2afe05e6ec6085afc96f8e83adb97" name="sysconfig" arch="x86_64">
  <version epoch="0" ver="0.85.6" rel="9.1"/>
  <changelog author="mt@suse.de" date="1545393600">- version 0.85.0
- netconfig: change to write resolv.conf,yp.conf,forwarders.conf
  to files in /[var/]run/netconfig/ and link in /etc (fate#325872)
- netconfig: add to update ntp servers in chrony (bsc#1099272) and
  cleaned up to use start-ntpd addserver to update ntpd servers.
- Remove code to update from openSUSE older than 12.3, which is EOL
  (gh#openSUSE/sysconfig#19).
- Move /var/adm/netconfig to /var/lib/netconfig to become more FHS
  conform (gh#openSUSE/sysconfig#18).</changelog>
  <changelog author="mt@suse.de" date="1547726400">- version 0.85.1
- removed modprobe.d/50-blacklist.conf, which will be provided by
  the suse-module-tools package instead (boo#1107611). See also:
  gh#openSUSE/suse-module-tools/pull/3
  gh#openSUSE/sysconfig/pull/22</changelog>
  <changelog author="coolo@suse.com" date="1549713600">- HOTPATCH (to be reverted): revert-var-adm-lib-netconfig-move.patch</changelog>
  <changelog author="mt@suse.de" date="1550145600">- version 0.85.2
- Fixed changes file to mention relevant github pull requests.
- Removed remaining preun rpm hook from EOL openSUSE versions
- Merged /var/adm/netconfig move revert from openSUSE:Factory
  causing to not find md5 sums from previous netconfig version
  due to incorrectly merged hook in spec file and trouble on
  transactional systems without writeable /var/lib/netconfig.
  Removed obsoletes revert-var-adm-lib-netconfig-move.patch.
  (bsc#1124152,bsc#1124340).
- Merged rpm spec bash section marks (gh#openSUSE/sysconfig#23)</changelog>
  <changelog author="max@suse.com" date="1563969600">- version 0.85.3
- boo#1123699: Use systemd's tmpfile mechanism to create the
  symlink infrastructure for resolv.conf and yp.conf early during
  boot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Mark /etc/yp.conf as %config(noreplace): this is the same as the
  file shipped by ypbind has as mode. In sysconfig we create a
  symlink, in ypbind, the file is actually only owned for
  reference. Having the same modes allows for the bots to do their
  work properly (boo#1159566).</changelog>
  <changelog author="mt@suse.com" date="1582632000">- version 0.85.4
- Add Upstream First openSUSE Build Service Policy to the spec</changelog>
  <changelog author="mt@suse.com" date="1595332800">- version 0.85.5
- spec: Fix Requires, use file requires
  (https://github.com/openSUSE/sysconfig/pull/25)
- ntp: call chrony helper in background (bsc#1173391)</changelog>
  <changelog author="mt@suse.com" date="1600689600">- version 0.85.6
- netconfig: execute chrony/helper in /usr/libexec with fallback
  to it's previous location in /usr/lib (boo#1176285)
- netconfig: only write files like /etc/resolv.conf on content
  change to avoid that e.g. dnsmasq (if running) re-reads the
  /etc/resolv.conf and re-initializes itself (bsc#1176325)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623153600">- Link as Position Independent Executable (bsc#1184124).</changelog>
</package>
<package pkgid="ccb194ce99b2e55839a8048313b75b5af839942f05daa76010c641d950449309" name="sysconfig-netconfig" arch="x86_64">
  <version epoch="0" ver="0.85.6" rel="9.1"/>
  <changelog author="mt@suse.de" date="1545393600">- version 0.85.0
- netconfig: change to write resolv.conf,yp.conf,forwarders.conf
  to files in /[var/]run/netconfig/ and link in /etc (fate#325872)
- netconfig: add to update ntp servers in chrony (bsc#1099272) and
  cleaned up to use start-ntpd addserver to update ntpd servers.
- Remove code to update from openSUSE older than 12.3, which is EOL
  (gh#openSUSE/sysconfig#19).
- Move /var/adm/netconfig to /var/lib/netconfig to become more FHS
  conform (gh#openSUSE/sysconfig#18).</changelog>
  <changelog author="mt@suse.de" date="1547726400">- version 0.85.1
- removed modprobe.d/50-blacklist.conf, which will be provided by
  the suse-module-tools package instead (boo#1107611). See also:
  gh#openSUSE/suse-module-tools/pull/3
  gh#openSUSE/sysconfig/pull/22</changelog>
  <changelog author="coolo@suse.com" date="1549713600">- HOTPATCH (to be reverted): revert-var-adm-lib-netconfig-move.patch</changelog>
  <changelog author="mt@suse.de" date="1550145600">- version 0.85.2
- Fixed changes file to mention relevant github pull requests.
- Removed remaining preun rpm hook from EOL openSUSE versions
- Merged /var/adm/netconfig move revert from openSUSE:Factory
  causing to not find md5 sums from previous netconfig version
  due to incorrectly merged hook in spec file and trouble on
  transactional systems without writeable /var/lib/netconfig.
  Removed obsoletes revert-var-adm-lib-netconfig-move.patch.
  (bsc#1124152,bsc#1124340).
- Merged rpm spec bash section marks (gh#openSUSE/sysconfig#23)</changelog>
  <changelog author="max@suse.com" date="1563969600">- version 0.85.3
- boo#1123699: Use systemd's tmpfile mechanism to create the
  symlink infrastructure for resolv.conf and yp.conf early during
  boot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Mark /etc/yp.conf as %config(noreplace): this is the same as the
  file shipped by ypbind has as mode. In sysconfig we create a
  symlink, in ypbind, the file is actually only owned for
  reference. Having the same modes allows for the bots to do their
  work properly (boo#1159566).</changelog>
  <changelog author="mt@suse.com" date="1582632000">- version 0.85.4
- Add Upstream First openSUSE Build Service Policy to the spec</changelog>
  <changelog author="mt@suse.com" date="1595332800">- version 0.85.5
- spec: Fix Requires, use file requires
  (https://github.com/openSUSE/sysconfig/pull/25)
- ntp: call chrony helper in background (bsc#1173391)</changelog>
  <changelog author="mt@suse.com" date="1600689600">- version 0.85.6
- netconfig: execute chrony/helper in /usr/libexec with fallback
  to it's previous location in /usr/lib (boo#1176285)
- netconfig: only write files like /etc/resolv.conf on content
  change to avoid that e.g. dnsmasq (if running) re-reads the
  /etc/resolv.conf and re-initializes itself (bsc#1176325)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623153600">- Link as Position Independent Executable (bsc#1184124).</changelog>
</package>
<package pkgid="6722a1fc0dd3aac02ac8bd26438de9c1b96d4c01f3d10a717b36062fc0d517f2" name="sysfsutils" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="3.3.1"/>
  <changelog author="hare@suse.de" date="1168948800">- Run ldconfig on %post (#204063)
- Do not duplicate .so symlink (#235332)</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="hare@suse.de" date="1211889600">- Include systool binary (bnc#391754)</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="crrodriguez@suse.de" date="1237896000">- remove static libraries</changelog>
  <changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
  <changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
  <changelog author="aj@suse.de" date="1283860800">- Create devel package.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1329393600">- Libraries are back to %{_libdir}, /usr merge project</changelog>
  <changelog author="lduncan@suse.com" date="1594382400">- Fix cdev name comparison (bsc#1155305), adding patches:
  * sysfsutils-Fix-issue-with-sysfs-name-comparisons.patch
  * sysfsutils-Limit-cdev-name-length-comparsion-to-strlen-1.patch</changelog>
</package>
<package pkgid="38620fe56089a1e9cf6cdc265d7864b2793a12b015474a0a435aa124cd5c13b5" name="sysstat" arch="x86_64">
  <version epoch="0" ver="12.0.2" rel="3.33.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1543320000">- Security fixes:
  * The remap_struct function in sa_common.c has an out-of-bounds
    read during a memmove call [CVE-2018-19416, bsc#1117001]
  * The remap_struct function in sa_common.c has an out-of-bounds read
    during a memset call [CVE-2018-19517, bsc#1117260]
  * Added patch sysstat-12.0.2-CVE-2018-19416-and-CVE-2018-19517.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1561377600">- Fix scaling issue with mtab symlinks and automounter [bsc#1138767]
  * Added sysstat-mtab-symlinks-and-automounter.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563883200">- Remove deprecated Require gettext and require gettext-runtime only
  during build [bsc#1142470]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568116800">- Security fix: [bsc#1150114, CVE-2019-16167]
  * Memory corruption due to an Integer Overflow in remap_struct()
    in sa_common.c
  * Added sysstat-CVE-2019-16167.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1572436800">- Enable log information on service start/stop [bsc#1144923, jsc#SLE-5958]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1576152000">- Security fix: [bsc#1159104, CVE-2019-19725]
  * Double free in check_file_actlst in sa_common.c
- Add sysstat-CVE-2019-19725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1600430400">- Fix average iowait output of sar [bsc#1174227]
  * The iowait value reported by the kernel can also decrement as
    a result of inaccurate iowait tracking. Waiting on IO can be
    first accounted as iowait but then instead as idle. Therefore
    if the idle value during the same period did not decrease then
    consider this is a problem with the iowait reporting and correct
    the previous value according to the new reading. Otherwise, treat
    this as CPU coming back online.
- Add patch sysstat-iowait-decr.patch</changelog>
  <changelog author="kukuk@suse.com" date="1601726400">- Don't hard require systemd, it works without,too. (bsc#1186827)</changelog>
  <changelog author="pmonreal@suse.com" date="1602849600">- Fix iostat -y switch results [bsc#1177747]
- Add sysstat-12.1.6-iostat-y-option.diff</changelog>
  <changelog author="david.anes@suse.com" date="1643889600">- Fix possible segfault in read_task_stats() [bsc#1194679]
- Add sysstat-fix-segfault-in-read_task_stats.patch</changelog>
</package>
<package pkgid="d2d3e44eb49c1d90773c2af77578a96ce1679203812c5f1e92748299c569cfe8" name="system-group-audit" arch="x86_64">
  <version epoch="0" ver="2.8.5" rel="3.2"/>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)
- Resolve issue with previous change if both Python2 and Python3 are
  present, tests were failing as python2 bindings are preferred in this
  case.</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.6.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
</package>
<package pkgid="ce893d46a2fe6b0bc04e978db7a891035b619f5d4e11389ca3dc1572974c920a" name="system-group-hardware" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="8637f3d8456834fe801dbcbce61786d2d4aa811ce3dc15041a14167a3a81a9e5" name="system-group-kvm" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="cbd2b1745f6a3e7de90e82c6912a4f826a19d58cf322b8a58afe4dc8d60a64f2" name="system-group-libvirt" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="0c4837884f8e4c087947048fa1b089e016e1f950a664a6f316e54e25d68679e0" name="system-group-wheel" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="f6b6b07b68e28d5b3ef0277449ddf7b73ee6e65a2481e98bd51f26f43760fe6a" name="system-user-daemon" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="782edaabad7aee3b511ceaf9cec21acfa2bb8a4debd30572be8a1bf25c698924" name="system-user-libvirt-dbus" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="150300.1.1"/>
  <changelog author="lnussel@suse.de" date="1592395200">- initial package version 1.4.0</changelog>
  <changelog author="jfehlig@suse.com" date="1594123200">- spec: Switch from explicitly adding user:group to sysuser
  mechanism</changelog>
  <changelog author="lnussel@suse.de" date="1601899200">- Actually require sysuser package
- Backport patch from git to autostart dbus interface using systemd
  (libvirt-dbus-systemd.diff)</changelog>
  <changelog author="jfehlig@suse.com" date="1604923200">- Fix syntax errors in system-user-libvirt-dbus.conf
  boo#1178530</changelog>
  <changelog author="jfehlig@suse.com" date="1622030400">- Add libvirtdbus user to libvirt group
  boo#1182538</changelog>
  <changelog author="jfehlig@suse.com" date="1647000000">- Update to version 1.4.1:
  * Release of libvirt-dbus 1.4.1
  * tests: allow running our tests against installed libvirt-dbus
  * tests: report proper error if `abs_top_builddir` is not defined
  * gitlab: use --fatal-meson-warnings in builds
  * meson: add git_werror option and only set if -Dwerror is not set
  * meson: honour meson warning_level setting
  * gitlab: adapt to use meson for libvirt-glib build
  * ci: refresh containers for CentOS-8 PowerTools repo rename
  * gitlab: replace "libvirt-" prefix with "ci-" in dockerfiles
  * gitlab: refresh containers with lcitool for fully minimized base
  * Dropped patches: libvirt-dbus-systemd.diff
- Add source service file
- Change system-user-libvirt-dbus subpackage to noarch
- Require libvirt group in system-user-libvirt-dbus subpackage
  bsc#1196968</changelog>
</package>
<package pkgid="2ac00744a358065ab11a5d96cf1ea29ce42fdeae9191d0c4638ae3127e58ded2" name="system-user-lp" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="d19c20cc5151b85b1ef0a5a03455d25bfde63ae697d74409708e2fb5bcb225c5" name="system-user-nobody" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="7916e573bb0d2c89ffca836cba35fa8d18d961b1dcc50f83ec49f8c59a4c5a4b" name="system-user-qemu" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="dcf0ca0ec0d077716136b2f34ebef8919b0b6960cbf9fc9c52a2e3a082fb64b1" name="system-user-root" arch="noarch">
  <version epoch="0" ver="20190513" rel="3.3.1"/>
  <changelog author="kukuk@suse.de" date="1497700800">- New package, splitted from system-users</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add group trusted [bsc#1044014]</changelog>
  <changelog author="kukuk@suse.de" date="1498046400">- Add some BuildIgnores for bootstrapping</changelog>
  <changelog author="fvogt@suse.com" date="1557748800">- Bump to version 20190513:
  * Invalidate root password by default (bsc#1134524)</changelog>
</package>
<package pkgid="1ced9dfffe4e8296517df3b41579bd52a4275af58dfedec50f4a6d99e8e32fde" name="system-user-tss" arch="noarch">
  <version epoch="0" ver="20170617" rel="17.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565697600">- Remove s390 groups again. The s390-tools maintainer wants to add groups in
  s390-tools manually.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Add tss user for TPM tools (boo#1162360).</changelog>
  <changelog author="msuchanek@suse.com" date="1582027200">- Align /var/lib/tss permissions with trousers (boo#1162360).</changelog>
  <changelog author="kukuk@suse.com" date="1584705600">- Call usermod only if installed</changelog>
  <changelog author="kukuk@suse.com" date="1585137600">- Use test -x instead of -f</changelog>
  <changelog author="kukuk@suse.com" date="1598011200">- Don't add group nogroup to user nobody, as many daemons misuse
  'nogroup' as own group</changelog>
  <changelog author="jfehlig@suse.com" date="1605182400">- Add system account and groups for kvm, qemu, and libvirt
  (jsc#SLE-11629)
  New files: system-group-kvm.conf, system-group-libvirt.conf,
  system-user-qemu.conf</changelog>
  <changelog author="jfehlig@suse.com" date="1605268800">- Add qemu user to kvm group</changelog>
  <changelog author="fcrozat@suse.com" date="1607083200">- Remove kvm group from hardware subpackage, since kvm is in its
  own subpackage (jsc#SLE-11629).</changelog>
  <changelog author="msuchanek@suse.com" date="1631534400">- system-user-tss.conf: Remove group entry, not needed and did
  contain syntax errors (bsc#1190401).</changelog>
</package>
<package pkgid="6b465e1dec1878ba9e473e98e42c73c3823320eed48fcb22a27df5585732ab3b" name="systemd" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="80913712f4e5d935e32d691e6feefc2191f7ade62e9719f47a80740a28eec6aa" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="7e3c3abff05d4557ce9875580021ba1d55877ed78031ece00cc2046a6080f380" name="systemd-default-settings" arch="noarch">
  <version epoch="0" ver="0.7" rel="3.2.1"/>
  <changelog author="fbui@suse.com" date="1602504000">- Introduce "upstream" branding sub-package
  Installing this branding sub-package is supposed to restore upstream
  defaults by uninstalling all custom drop-ins installed by other
  branding sub-packages.</changelog>
  <changelog author="fbui@suse.com" date="1602590400">- Import 0.2
  cc4e951 timesyncd: add default ntp servers for SUSE and openSUSE distros</changelog>
  <changelog author="fbui@suse.com" date="1603454400">- Import 0.3
  d299248 List drop-in directories in SUSE.list exclusively
  e4651a7 Disable memory accounting by default for all distros (jsc#PM-2229 jsc#PM-2230)</changelog>
  <changelog author="fbui@suse.com" date="1603713600">- Make sure the release number between the main and the branding
  packages match</changelog>
  <changelog author="fbui@suse.com" date="1603800000">- Import 0.4
  a97bb54 Makefile: don't generate the rpm file lists anymore
  5473da6 Makefile: introduce 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787200">- Import 0.5
  0c5e241 SLE: turn off RemoveIPC by default for logind (fate#320125)
  cb6914f SLE: restore ProtectHostname=no for udevd (bsc#1178374)
  7e332a6 Add a header in all each drop-ins
  465e1c7 Makefile: simplify 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787201">- Issue a daemon-reload in %post of the main package</changelog>
  <changelog author="fbui@suse.com" date="1606392000">- Fix typo introduced by the previous change (bsc#1179183)</changelog>
  <changelog author="fbui@suse.com" date="1613563200">- Import 0.6
  d3fab7c Introduce SLE-Micro branding</changelog>
  <changelog author="fbui@suse.com" date="1613995200">- Import 0.7
  2a61f77 Convert our configuration file dropins into 'early' ones</changelog>
</package>
<package pkgid="b8ecc34eac55c5369be9026e66b3d6b2db682258b45e54541d93f78a0ca13684" name="systemd-default-settings-branding-SLE-Micro" arch="noarch">
  <version epoch="0" ver="0.7" rel="3.2.1"/>
  <changelog author="fbui@suse.com" date="1602504000">- Introduce "upstream" branding sub-package
  Installing this branding sub-package is supposed to restore upstream
  defaults by uninstalling all custom drop-ins installed by other
  branding sub-packages.</changelog>
  <changelog author="fbui@suse.com" date="1602590400">- Import 0.2
  cc4e951 timesyncd: add default ntp servers for SUSE and openSUSE distros</changelog>
  <changelog author="fbui@suse.com" date="1603454400">- Import 0.3
  d299248 List drop-in directories in SUSE.list exclusively
  e4651a7 Disable memory accounting by default for all distros (jsc#PM-2229 jsc#PM-2230)</changelog>
  <changelog author="fbui@suse.com" date="1603713600">- Make sure the release number between the main and the branding
  packages match</changelog>
  <changelog author="fbui@suse.com" date="1603800000">- Import 0.4
  a97bb54 Makefile: don't generate the rpm file lists anymore
  5473da6 Makefile: introduce 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787200">- Import 0.5
  0c5e241 SLE: turn off RemoveIPC by default for logind (fate#320125)
  cb6914f SLE: restore ProtectHostname=no for udevd (bsc#1178374)
  7e332a6 Add a header in all each drop-ins
  465e1c7 Makefile: simplify 'archive' target</changelog>
  <changelog author="fbui@suse.com" date="1605787201">- Issue a daemon-reload in %post of the main package</changelog>
  <changelog author="fbui@suse.com" date="1606392000">- Fix typo introduced by the previous change (bsc#1179183)</changelog>
  <changelog author="fbui@suse.com" date="1613563200">- Import 0.6
  d3fab7c Introduce SLE-Micro branding</changelog>
  <changelog author="fbui@suse.com" date="1613995200">- Import 0.7
  2a61f77 Convert our configuration file dropins into 'early' ones</changelog>
</package>
<package pkgid="a621afa74c6973a644d448930c647940b7c256e58d8b408785c4a720daa3e73d" name="systemd-journal-remote" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="9079a0ee1541dc854d7e02a1670a8db7c358e7ff396d3974c50619186290bd9e" name="systemd-presets-branding-SLE-Micro-for-Rancher" arch="noarch">
  <version epoch="0" ver="20220131" rel="150300.1.1"/>
  <changelog author="kkaempf@suse.com" date="1643630400">- Initial version 20220131</changelog>
</package>
<package pkgid="18dc7ffdd1feada78a9200b7129ffb275148e51fbd3972e88b8490456dbebd35" name="systemd-presets-branding-SMO" arch="noarch">
  <version epoch="0" ver="20220103" rel="150300.2.1"/>
  <changelog author="jsrain@suse.com" date="1593604800">- initial version based on openSUSE MicroOS</changelog>
  <changelog author="jsrain@suse.com" date="1602158400">- enable the sshd service by default</changelog>
  <changelog author="jsrain@suse.com" date="1641211200">- enable wicked.service (jsc#SMO-8)</changelog>
  <changelog author="iforster@suse.com" date="1645444800">- enable transactional-update-cleanup.timer (required by
  transactional-update 4.0.0)</changelog>
</package>
<package pkgid="1585d06a1a5e47720604ae7d5202fedf369b998275deb5d1aa12dffd288a4194" name="systemd-presets-common-SUSE" arch="noarch">
  <version epoch="0" ver="15" rel="8.9.1"/>
  <changelog author="sschricker@suse.com" date="1552564800">- enable nvmefc-boot-connections.service to discover
  network-provided nvme drives on boot (bsc#1128428)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1554120000">- Enable logwatch.timer (bsc#1112500).</changelog>
  <changelog author="iforster@suse.com" date="1559822400">- Enable ignition-firstboot-complete.service</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ngompa13@gmail.com" date="1597147200">- Enable dnf-makecache.timer</changelog>
  <changelog author="fvogt@suse.com" date="1598443200">- Enable btrfsmaintenance-refresh.path and disable
  btrfsmaintenance-refresh.service to avoid needless refresh on boot
  (boo#1165780)</changelog>
  <changelog author="alarrosa@suse.com" date="1614859200">- Enable user services pipewire.socket and pipewire-pulse.socket
  (boo#1183012).</changelog>
  <changelog author="fcrozat@suse.com" date="1615377600">- Enable user service pipewire-media-session.service (used with
  pipewire &gt;= 0.3.23).</changelog>
  <changelog author="msuchanek@suse.com" date="1617796800">- Enable hcn-init.service for HNV on POWER (bsc#1184136 ltc#192155).</changelog>
  <changelog author="alarrosa@suse.com" date="1622116800">- When installing the systemd-presets-common-SUSE package for the
  first time in a new system, it might happen that some services
  are installed before systemd so the %systemd_pre/post macros
  would not work. This is handled by enabling all preset services
  in this package's %posttrans section but it wasn't enabling
  user services, just system services. Now it enables also the
  user services installed before this package, thus fixing
  boo#1186561</changelog>
</package>
<package pkgid="a387ef39259466f69d4da37552632fe2fab8b6e53d5564a7ab63f335eab2dd21" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="b9f15803e579e5b1b5c6720e145a23ea8fc5331feaed15e6f5b758094c930e33" name="sysuser-shadow" arch="noarch">
  <version epoch="0" ver="2.0" rel="4.2.8"/>
  <changelog author="lnussel@suse.de" date="1482321600">- initial package</changelog>
  <changelog author="kukuk@suse.de" date="1484913600">- Add macros.sysusers</changelog>
  <changelog author="kukuk@suse.de" date="1489579200">- Don't remove 'm' and 'r' entries from sysusers configuration</changelog>
  <changelog author="kukuk@suse.de" date="1496145600">- Don't ignore errors of systemd-sysusers [bsc#1039708]</changelog>
  <changelog author="kukuk@suse.de" date="1497700800">- Convert sysusers config file to shadow arguments and use
  shadow suite to create user and groups. Fixes [bsc#1041497] and
  serveral dependency loops.</changelog>
  <changelog author="kukuk@suse.de" date="1497787200">- Put helper script into own subpackage</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Add requires for shadow to sysuser-shadow</changelog>
  <changelog author="kukuk@suse.de" date="1497873601">- sysuser-tools needs to require sysuser-shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1506513600">- sysusers2shadow.sh: Exit if one of the useradd/groupadd/usermod
  call fails: the resulting system is quite undefined if this
  should happen.
- sysusers-generate-pre: exit the pre script with the exit code
  of sysusers2shadow.sh.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507550400">- Furhter enhance sysusers-generate-pre: inside the build
  environment, it can be acceptable to be failing to create the
  users (e.g when building sysuser-tools or system-user-root, since
  those two packages have to be speificallty excluded). Always
  return with error code 0 if /.buildenv exists.</changelog>
</package>
<package pkgid="9e74cda3caa845e11ce166f02256ecda746535e7330ccad905794abdcac0b6ff" name="sysvinit-tools" arch="x86_64">
  <version epoch="0" ver="2.99" rel="1.1"/>
  <changelog author="werner@suse.de" date="1560772800">- Update to sysvinit 2.95
  * new logsave helper
- Update to startpar-0.63
  * move startpar from /sbin to /bin
- Port our patches
  * startpar-0.58.dif
  * sysvinit-2.88dsf-suse.patch
  * sysvinit-2.90-no-kill.patch
  * sysvinit-2.90.dif</changelog>
  <changelog author="werner@suse.de" date="1561118400">- Remove logsave as well as the manual page as those as part of
  package e2fsprogs already</changelog>
  <changelog author="werner@suse.de" date="1567080000">- Update to killproc 2.23
  * killproc has its upstream at https://github.com/bitstreamout/killproc
  * Use new system call statx(2) to replace old stat(2)/lstat(2)
- Remove patches now upstream:
  * killproc-2.18-open_flags.dif
  * killproc-2.21.dif
  * killproc-sysmacros.patch
  * killproc-mntinf-optional.patch</changelog>
  <changelog author="werner@suse.de" date="1568808000">- Update to sysvinit 2.96
  * Added -z command line paramter to pidof which tells pidof to
    try to find processes in uninterruptable (D) or zombie (Z) states.
    This can cause pidof to hang, but produces a more complete process
    list.
  * Reformatted init code to make if/while logic more clear.
  * Make sure src/Makefile cleans up all executable files
    when parent Makefile calls "make clean".</changelog>
  <changelog author="dimstar@opensuse.org" date="1598356800">- Update to sysvinit 2.97:
  * Check $(ROOT) filesystem for libcrypt instead of a hardcoded
    path to /usr.
  * Code clean-up and making sure we avoid freeing unused memory.
  * Added shell script which converts systemd unit files into
    init.d style scripts.
  * Allow init to load configuration data from files stored in
    /etc/inittab.d/
  * Allow shutdown time to be specified in the format +hh:mm. This
    is in addition to the existing formats such as hh:mm, +m, and
    "now".
  * Fixed typos in manual pages.
- Update startpar to 0.65:
  + Make sure startpar testsuite can find insserv executable in
    /usr/sbin or /sbin.
  + Added PREFIX variable to Makefile and testsuite to make
    location of startpar and insserv more flexible.
- Rebase sysvinit-2.90.dif.
- Drop SCVER defines: not used in any place.
- Drop startpar-sysmacros.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Drop /bin/pidof and /sbin/pidof, including corresponding man
  page: let's switch to pidof as provided by procps-ng.</changelog>
  <changelog author="werner@suse.de" date="1605614400">- Update to sysvinit 2.98:
  * Fixed time parsing in shutdown when there is a + in front of a 0 time offset.
    Commands with a postiive time offset (+1) would work but +0 fails.
    This has been corrected by Arkadiusz Miskiewicz.</changelog>
  <changelog author="lnussel@suse.de" date="1606305600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="werner@suse.de" date="1613995200">- Update to sysvinit 2.99:
  * Mostly typo and just better documentation and easier to read
    code comments</changelog>
  <changelog author="werner@suse.de" date="1617192000">- (re)add also support for SLE-15-SP3</changelog>
</package>
<package pkgid="736fdefe8254fb2faa126cc93249c7e5c35e84641e633df71e171359f7a24151" name="tar" arch="x86_64">
  <version epoch="0" ver="1.30" rel="3.9.1"/>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
  <changelog author="kstreitova@suse.com" date="1553515200">- add tar-1.30-CVE-2018-20482.patch to fix a security issue where
  tar when "--sparse" option is used, mishandles file shrinkage
  during read access, which allows local users to cause a denial
  of service (infinite read loop in sparse_dump_region in sparse.c)
  by modifying a file that is supposed to be archived by a different
  user's process [bsc#1120610] [CVE-2018-20482]
- add tar-1.30-CVE-2019-9923.patch to fix a security issue where
  pax_decode_header in sparse.c in tar had a NULL pointer
  dereference when parsing certain archives that have malformed
  extended headers [bsc#1130496] [CVE-2019-9923]</changelog>
  <changelog author="pgajdos@suse.com" date="1615809600">- security update
- added patches
  fix CVE-2021-20193 [bsc#1181131], Memory leak in read_header() in list.c
  + tar-CVE-2021-20193.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link /var/lib/tests/tar/bin/genfile as Position-Independent Executable
  (bsc#1184124).
  + tar-PIE.patch</changelog>
</package>
<package pkgid="73fb009160660a155e40db04d60e4323e4ed0f81762ddd0b8658006c76a1d823" name="terminfo" arch="x86_64">
  <version epoch="0" ver="6.1" rel="5.9.1"/>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
</package>
<package pkgid="d79e2e2288f48eaf0568839044d26d7dc09923968cca5f7943fe54c7f917a6f9" name="terminfo-base" arch="x86_64">
  <version epoch="0" ver="6.1" rel="5.9.1"/>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
</package>
<package pkgid="29d8cdc11bc05fc300a96ccd4ada22d36e5a1c058d157bbdc94178db6c116b56" name="tftp" arch="x86_64">
  <version epoch="0" ver="5.2" rel="5.3.1"/>
  <changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
  <changelog author="vcizek@suse.com" date="1366286400">- change ownership of /srv/tftpboot to tftp:tftp, otherwise tftp
  daemon can't write there (bnc#813226)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1395748800">- drop tftp-hpa-0.43_old-autoconf.diff not needed for any
  product still in active maintenance.
- Use correct systemd macros in %pre, %post..
- config.h must be included *everywhere* (tftp-config_h.patch)
- tftp.service:
  * This service needs to be started after network.target
  * Use PrivateDevices=yes</changelog>
  <changelog author="vcizek@suse.com" date="1442577600">- tftp-hpa-0.48-macros-crash.patch:
  prevent buffer overflow in handling of \x macro (bnc#793883)
- tftp-hpa-0.48-macros-v6mapped.patch:
  for \i and \x, expand v6-mapped addresses as native IPv4
  (bnc#793883)
- patches come from Michal Kubecek</changelog>
  <changelog author="vcizek@suse.com" date="1442577601">- respond from the destination address taken from the first udp
  message's ancillary data (bnc#928283)
  * added tftp-multi-addresses.patch</changelog>
  <changelog author="vcizek@suse.com" date="1446465600">- add a sysconfig file to allow passing parameters to the service
  (requested in bsc#951591)
  * added tftp.sysconfig</changelog>
  <changelog author="jhura@suse.com" date="1497614400">- Removed xinetd service</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571054400">- Add tftp.socket requirement to the service unit section [bsc#1153625]</changelog>
</package>
<package pkgid="db4109b25c5d51500ae9d264afe6489d398dd50cffa660101be5d6994dfd4803" name="tftpboot-installation-openSUSE-Leap-Micro-5.2-x86_64" arch="noarch">
  <version epoch="0" ver="16.56.14" rel="150300.4.35"/>
  <changelog author="wfeldt@opensuse.org" date="1619179200">- merge gh#openSUSE/installation-images#499
- fix NVMf autoconnect udev rule (bsc#1184908)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1619438400">- merge gh#openSUSE/installation-images#501
- trigger automatic nvme discovery (bsc#1184908)
- 16.56.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1619611200">- merge gh#openSUSE/installation-images#507
- Revert "trigger automatic nvme discovery (bsc#1184908)"
- trigger automatic nvme discovery in udev start script
  (bsc#1184908)
- 16.56.9</changelog>
  <changelog author="wfeldt@opensuse.org" date="1620043200">- merge gh#openSUSE/installation-images#508
- create NVMe config files before udevd is started (bsc#1184908)
- 16.56.10</changelog>
  <changelog author="wfeldt@opensuse.org" date="1629892800">- merge gh#openSUSE/installation-images#520
- ensure /usr/share/pci.ids exists (bsc#1189767)
- 16.56.11</changelog>
  <changelog author="wfeldt@opensuse.org" date="1634299200">- merge gh#openSUSE/installation-images#526
- ensure perl-XML-Simple is available in installation system
  (bsc#1191498)
- 16.56.12</changelog>
  <changelog author="wfeldt@opensuse.org" date="1635940800">- merge gh#openSUSE/installation-images#533
- merge gh#openSUSE/installation-images#521
- Fix conditions for turning on/off zram (bcs#1187434)
- 16.56.13</changelog>
  <changelog author="wfeldt@opensuse.org" date="1644235200">- merge gh#openSUSE/installation-images#574
- adjust to recent samba re-packaging (bsc#1195627)
- 16.56.14</changelog>
  <changelog author="wfeldt@opensuse.org" date="1644235201">- merge gh#openSUSE/installation-images#574
- adjust to recent samba re-packaging (bsc#1195627)
- 16.56.14</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1645617600">- Take latest changes from SLE Micro and tweak it for Leap Micro
- Add leap-micro.diff which adds new theme LeapMicro</changelog>
</package>
<package pkgid="e5bad1aee678cae7ab4c699eddaf294b29c5c657466f24a627148d6811ec247b" name="thin-provisioning-tools" arch="x86_64">
  <version epoch="0" ver="0.7.5" rel="3.3.1"/>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.7.0:
  * boo#1043043 gh#jthornber/thin-provisioning-tools#79
  * Needed for working with latest lvm2</changelog>
  <changelog author="mpluskal@suse.com" date="1497787200">- Update dependencies of scriplets (boo#1044823)</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Depend on coreutils for initrd macros (bsc#1055492).</changelog>
  <changelog author="mpluskal@suse.com" date="1504612800">- Update to version 0.7.1:
  * Misc internal changes
- Enable development tools building</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.7.2:
  * Misc internal changes
  * Updated documentation and manpages</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.7.3:
  * Misc internal changes
  * Updates to tests</changelog>
  <changelog author="mpluskal@suse.com" date="1508241600">- Update to version 0.7.4:
  * No changes provided for this release</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.7.5:
  * Fix a bug that stopped cache_restore working with metadata
    version 2.</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1623240000">- Link as position-independent executable (bsc#1184124).</changelog>
</package>
<package pkgid="560e8370c57abf9eca0f8df838d282bb4341d2595170c62f3cc9a16062ea10d5" name="timezone" arch="x86_64">
  <version epoch="0" ver="2021e" rel="75.4.1"/>
  <changelog author="mcalabkova@suse.com" date="1590408000">- zdump --version reported "unknown" (boo#1172055)</changelog>
  <changelog author="mcalabkova@suse.com" date="1602158400">- timezone update 2020b (bsc#1177460)
  * Revised predictions for Morocco's changes starting in 2023.
  * Canada's Yukon changes to -07 on 2020-11-01, not 2020-03-08.
  * Macquarie Island has stayed in sync with Tasmania since 2011.
  * Casey, Antarctica is at +08 in winter and +11 in summer.
  * zic no longer supports -y, nor the TYPE field of Rules.
- Rebased timezone-2018f-bsc1112310.patch</changelog>
  <changelog author="mcalabkova@suse.com" date="1603108800">- timezone update 2020c (bsc#1177460)
  * Fiji starts DST later than usual, on 2020-12-20.</changelog>
  <changelog author="mcalabkova@suse.com" date="1603368000">- timezone update 2020d (bsc#1177460)
  * Palestine ends DST earlier than predicted, on 2020-10-24.</changelog>
  <changelog author="mcalabkova@suse.com" date="1604318400">- Add fat.patch to generate "fat" timezone files (was default before 2020b)
  bsc#1178346</changelog>
  <changelog author="mmachova@suse.com" date="1608724800">- timezone update 2020e (bsc#1177460)
  * Volgograd switches to Moscow time on 2020-12-27 at 02:00.</changelog>
  <changelog author="mmachova@suse.com" date="1609243200">- timezone update 2020f (bsc#1177460)
  * 'make rearguard_tarballs' no longer generates a bad rearguard.zi,
    fixing a 2020e bug.</changelog>
  <changelog author="mmachova@suse.com" date="1611576000">- timezone update 2021a (bsc#1177460)
  * South Sudan changes from +03 to +02 on 2021-02-01 at 00:00.</changelog>
  <changelog author="mmachova@suse.com" date="1625745600">- Install tzdata.zi (bsc#1188127)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637150400">- timezone update 2021e (bsc#1177460):
  * Palestine will fall back 10-29 (not 10-30) at 01:00
- timezone update 2021d:
  * Fiji suspends DST for the 2021/2022 season
  * 'zic -r' marks unspecified timestamps with "-00"
- timezone update 2021c:
  * Revert almost all of 2021b's changes to the 'backward' file
  * Fix a bug in 'zic -b fat' that caused old timestamps to be
    mishandled in 32-bit-only readers
- timezone update 2021b:
  * Jordan now starts DST on February's last Thursday.
  * Samoa no longer observes DST.
  * Move some backward-compatibility links to 'backward'.
  * Rename Pacific/Enderbury to Pacific/Kanton.
  * Correct many pre-1993 transitions in Malawi, Portugal, etc.
  * zic now creates each output file or link atomically.
  * zic -L no longer omits the POSIX TZ string in its output.
  * zic fixes for truncation and leap second table expiration.
  * zic now follows POSIX for TZ strings using all-year DST.
  * Fix some localtime crashes and bugs in obscure cases.
  * zdump -v now outputs more-useful boundary cases.
  * tzfile.5 better matches a draft successor to RFC 8536.
- Refresh tzdata-china.patch</changelog>
</package>
<package pkgid="f56da3cf6d5e7d5d489935bd6ab69eabec3bb69ddc988d07551aca9d0054a5fe" name="toolbox" arch="noarch">
  <version epoch="0" ver="2.3+git20220117.bd53c7c" rel="150300.2.1"/>
  <changelog author="kukuk@suse.com" date="1614340800">- Update to version 2.1+git20210226.daeb191:
  * Set trap only after option parsing (#22)</changelog>
  <changelog author="kukuk@suse.com" date="1614945600">- Update to version 2.1+git20210305.ca2bc53:
  * Avoid copying the user setup script with 'podman cp'</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Update to version 2.1+git20210311.15cb3ad:
  * Don't check for subuid if root calls toolbox [bsc#1183375]</changelog>
  <changelog author="kukuk@suse.com" date="1617019200">- Update to version 2.1+git20210329.d14ac82:
  * Fix localtime and mount sys, e.g., for tracing
  * Fix 'toolbox list' returning an error code even if working</changelog>
  <changelog author="kukuk@suse.com" date="1629720000">- Update to version 2.2+git20210823.dd0fff8:
  * README mini-typo
  * Docker: don't use unsupported --userns=keep-id
  * Docker: also check for created status
  * Try to use docker if installed and podman is not
  * Properly share namespaces in non-user toolboxes
  * Properly quote workdir</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1636372800">- Don't install config file in /etc in favor of a built-in default. Avoids
  empty /etc pulling wrong image.
- Handle Leap Micro (boo#1192474)</changelog>
  <changelog author="kukuk@suse.com" date="1637755200">- Update to version 2.2+git20211124.09791b1:
  * Introduce -n/--nostop switch so mutiple sessions can be run inside an existing toolbox</changelog>
  <changelog author="kukuk@suse.com" date="1642420800">- Update to version 2.3+git20220117.bd53c7c:
  - Fixes error where if custom image is used toolbox will download
    the default image before entering an existing container. (#40)</changelog>
  <changelog author="Jan Zerebecki &lt;jan.suse@zerebecki.de&gt;" date="1643198400">- Allow docker as an alternative to podman in the package Requires. This was
  supported since 2.2.</changelog>
  <changelog author="jsrain@suse.com" date="1645444800">- adjusted the patch to the toolbox container in registry</changelog>
</package>
<package pkgid="8e9d854e4a1bb177f9288614eac48d1f689482a42063fd85aeb08cefad7522e8" name="transactional-update" arch="x86_64">
  <version epoch="0" ver="4.0.0~rc2" rel="150300.1.1"/>
  <changelog author="iforster@suse.com" date="1630929600">- Version 3.5.3
  - t-u: Purge kernels as part of package operations
    Required for live patching support [bsc#1189728]</changelog>
  <changelog author="iforster@suse.com" date="1631361600">- Version 3.5.4
  - tukit: Fix resolved support [boo#1190383]</changelog>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]</changelog>
</package>
<package pkgid="0e3f60bded7dc903ee5ba9e71e6f76ef14ed8710f07aec174dacd7be8dc307db" name="transactional-update-zypp-config" arch="noarch">
  <version epoch="0" ver="4.0.0~rc2" rel="150300.1.1"/>
  <changelog author="iforster@suse.com" date="1630929600">- Version 3.5.3
  - t-u: Purge kernels as part of package operations
    Required for live patching support [bsc#1189728]</changelog>
  <changelog author="iforster@suse.com" date="1631361600">- Version 3.5.4
  - tukit: Fix resolved support [boo#1190383]</changelog>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]</changelog>
</package>
<package pkgid="c74f690b0a2873578daa85ebe2f7d7d19264fcd49fd14f9d2ef4c313cc2744e9" name="trousers" arch="x86_64">
  <version epoch="0" ver="0.3.14" rel="6.6.2"/>
  <changelog author="meissner@suse.com" date="1389700800">- Updated to trousers 0.3.11.2
  - license changed to BSD-3-Clause
  - various bug and manpage fixes
- trousers-0.3.10.diff renamed and rebased to trousers-0.3.11.2.diff</changelog>
  <changelog author="meissner@suse.com" date="1395230400">- trousers-wrap_large_key_overflow.patch: Do not wrap keys larger than
  2048 bit, as the space on the TPM is limited to that amount. (bnc#868933)</changelog>
  <changelog author="meissner@suse.com" date="1401796800">- updated to trousers 0.3.13 (bnc#881095 LTC#111124)
  - Changed exported functions which had a name too common, to avoid
    collision
  - Assessed daemon security using manual techniques and coverity
  - Fixed major security bugs and memory leaks
  - Added debug support to run tcsd with a different user/group
  - Daemon now properly closes sockets before shutting down
  * TROUSERS_0_3_12
  - Added new network code for RPC, which supports IPv6
  - Users of client applications can configure the hostname of the tcsd
    server they want to connect through the TSS_TCSD_HOSTNAME env var
    (only works if application didn't set a hostname in the context)
  - Added disable_ipv4 and disable_ipv6 config options for server
- removed trousers-wrap_large_key_overflow.patch: upstream
- removed trousers-0.3.11.2.diff: solved upstream now</changelog>
  <changelog author="mpluskal@suse.com" date="1427976000">- Cleanup spec-file with spec-cleaner
- Update prerequires
- Use systemd unit file
  * replace tcsd.init with tcsd.service</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434715200">- Force GNU inline semantics, fixes build with GCC5</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.</changelog>
  <changelog author="mailaender@opensuse.org" date="1483272000">- Update to version 0.3.14 (see ChangeLog) (FATE#321450)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1540900800">- fix wrong installation of system.data.{auth,noauth} into /var/lib/tpm. These
  files are only sample files that *can* be used to fake that ownership was
  already taken by trousers, when other TPM stacks did that already. These
  files should not be there by default. Therefore install them into
  /usr/share/trousers instead, to allow the user to use them at his own
  discretion (fixes bsc#1111381).
- implement a backup and restore logic for /var/lib/tpm/system.data.* to
  prevent removal of validly stored trousers state during update.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1574769600">- Fix a local symlink attack problem with the %posttrans scriptlet
  (bsc#1157651, CVE-2019-18898). A rogue tss user could have used this attack
  to gain ownership of arbitrary files in the system during
  installation/update of the trousers package.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1590408000">- fix a potential tss user to root privilege escalation when running tcsd
  (bsc#1164472). To do this run tcsd as the 'tss' user right away to prevent
  badly designed privilege drop and initialization code to run.
- add bsc1164472.patch: additionally harden operation of tcsd when running as
  root. No longer follow symlinks in /var/lib/tpm. Drop gid to tss main group.
  require /etc/tcsd.conf to be owned by root:tss mode 0640.</changelog>
</package>
<package pkgid="9ea9f81635a13927ad29db7d38a96e8b6380cdfcbb7ac208757606ad56a9e1fe" name="tukit" arch="x86_64">
  <version epoch="0" ver="4.0.0~rc2" rel="150300.1.1"/>
  <changelog author="iforster@suse.com" date="1630929600">- Version 3.5.3
  - t-u: Purge kernels as part of package operations
    Required for live patching support [bsc#1189728]</changelog>
  <changelog author="iforster@suse.com" date="1631361600">- Version 3.5.4
  - tukit: Fix resolved support [boo#1190383]</changelog>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]</changelog>
</package>
<package pkgid="69d07b2c49292baa03b7badb56596819ece63ddda15f8ee2e14201c3499db87a" name="tukitd" arch="x86_64">
  <version epoch="0" ver="4.0.0~rc2" rel="150300.1.1"/>
  <changelog author="iforster@suse.com" date="1630929600">- Version 3.5.3
  - t-u: Purge kernels as part of package operations
    Required for live patching support [bsc#1189728]</changelog>
  <changelog author="iforster@suse.com" date="1631361600">- Version 3.5.4
  - tukit: Fix resolved support [boo#1190383]</changelog>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]</changelog>
</package>
<package pkgid="f61d9da7d31e01c7c695bb551ccc4638a8fae8695c9bc8172a7e7223e066612c" name="typelib-1_0-AppIndicator3-0_1" arch="x86_64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="1.12"/>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547380800">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
</package>
<package pkgid="fddba8aee5f9545ba5f5fbb344efa6444feee9140b23378452741f9324e7e2fe" name="typelib-1_0-Atk-1_0" arch="x86_64">
  <version epoch="0" ver="2.34.1" rel="1.56"/>
  <changelog author="bjorn.lie@gmail.com" date="1524657600">- Update to version 2.29.1:
  + Important note: this is the first release without autotools
    support. From now on only meson would be supported.
  + Bugfixing: Setting accessible-role does not work (bgo#794513).
  + Build, autotools: Remove autotools support (bgo#795315).
  + Build, meson:
  - Fix linker options on Darwin (bgo#795065).
  - Follow meson_options convention (bgo#795301).
  + Updated translations.
- Following upstream changes, pass docs=true and introspection=true
  to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529409600">- Update to version 2.29.2:
  + Add ScrollTo and ScrollToPoint methods to AtkComponent.
  + Build: Require a more recent version fo Meson, 0.46.0.
  + Misc: Documentation, introspection, and versioning fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535457600">- Update to version 2.29.92:
  + Improve the documentation slightly.
- Use autosetup macro.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.30.0:
  + Fix "atk 2.29.2 is reported not to work any more"
    (glgo#GNOME/atk#1).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550059200">- Update to version 2.31.90:
  + AtkText: Add ScrollSubstringTo and ScrollSubstringToPoint
    methods to AtkText.
  + Build - meson:
  - Make atk work as a subproject.
  - Use an autotools compatible
    compatibility_version/current_version on macOS.
  - Fix usage of glib as a subproject dependency.
  - Replace shared_library by library.
  + Build - Visual Studio: Add build instructions for Visual
    Studio, as now is done via Meson.
  + Documentation:
  - Move atk_relation_set_contains_target to correct doc section.
  - Improve documentation for AtkText method return values.
  + Misc: atkplug, atksocket: Fix -Wredundant-decls.
  + Updated translations.
- Add meson_test macro, run tests during build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 2.31.92:
  + By mistake, 2.31.90 re-introduced a bug, as master didn't have
    the revert for "atkimplementor: use the G_DEFINE_INTERFACE
    macro to declare it as interface in the introspection".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552305600">- Update to version 2.32.0:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561464000">- Update to version 2.33.3:
  + Documentation: general documentation cleanup:
  - Move Deprecated section down on AtkUtil.
  - Update the list of symbols.
  - Annotate the version for AtkTableCellIface.
  - Use Markdown syntax for notes.
  - Use the appropriate syntax for enumerations.
  - Add missing documentation for AtkObject functions.
  - Write description for AtkImage method.
  - Add proper gtk-doc blurbs for AtkDocument, AtkComponentIface
    and AtkActionIface.
  - Remove atk.types (as we can autogenerate it).
  + AtkSocket/AtkPlug:  Implement proper constructor for AtkPlug
    and AtkSocket.
  + AtkText: Doc: minor doc fix for
    atk_text_get_default_attributes.
  + New Roles: Add ATK_ROLE_CONTENT_INSERTION and
    ATK_ROLE_CONTENT_DELETION.
  + Build:
  - Meson: do not guard gir behind a cross_build check.
  - Meson: refresh the build.
  - Meson: use Meson to generate the pkgconfig file.
  + Updated translations.
- Changes from version 2.33.2:
  + AtkObject: added accessible_id property.
  + AtkText
  - Edit documentation for last methods added in order to fix
    introspection
  - Fix failure value for atk_text_get_caret_offset.
  + Build: Bumping ATK version without a release as at-spi2-atk
    master started to depend on last API changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 2.34.0:
  + No changes provided by upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568289600">- Update to version 2.34.1:
  + Meson: fixed version.
- Update URL.</changelog>
</package>
<package pkgid="9873fd2e441860857e66723709507647af1b1c96ae2f92d7cd910234d16ffb98" name="typelib-1_0-GdkPixbuf-2_0" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="3.3.1"/>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="yfjiang@suse.com" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="zcjia@suse.com" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="98c6b2473445d8df2c2d11bb96ccdb296e62ccd084404fc2fab210d260409dda" name="typelib-1_0-Gtk-3_0" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
  <changelog author="fcrozat@suse.com" date="1623931200">- Add gtk3-fix-avahi-printers.patch: Ensure printers entries from
  Avahi are usable (bsc#1094486, bsc#1189238).</changelog>
</package>
<package pkgid="e6289596395a951b0966672dda922422c294485651e6cc1f02e4f424f33633f1" name="typelib-1_0-Libosinfo-1_0" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="1.52"/>
  <changelog author="jengelh@inai.de" date="1549281600">- Use noun phrase in summaries.</changelog>
  <changelog author="carnold@suse.com" date="1551441600">- Update to version 1.4.0
  Changes in this release include:
  * Add isodata test files for more distros
  * Refreshed translations from Zanata
  * Drop deprecated gnome-common and intltool
  * Fix test cases checking for medias, trees and images URIs due to
    libcurl issues when reusing the curl handler
  * Fix media identification when its identifiers have the maximum
    allowed size
  * Fix filling up the media properties when identifying it
  * Improvements in the tests in order to reduce code duplication
  * Add one test case per OS for medias, trees and images URIs tests
  * Add OSINFO_RELEASE_STATUS_ROLLING release status
  * Add API to add an installer script to a media
  * Add API to get all the installer scripts from a media</changelog>
  <changelog author="carnold@suse.com" date="1554897600">- Upstream bug fixes from Fabiano Fidêncio &lt;fabiano@fidencio.org&gt;
  0001-media-Fix-usage-of-application-id.patch
  0002-loader-Properly-load-the-arch-value-for-images.patch</changelog>
  <changelog author="carnold@suse.com" date="1557403200">- Update to version 1.5.0
  Changes in this release include:
  * Add API to get an OS from OsinfoTrees &amp; OsinfoImages
  * Add API to set an OS to OsinfoTrees &amp; OsinfoImages
  * Add API to get the OS variants from OsinfoTrees &amp; OsinfoImages
  * Add API to set the installation URL to a OsinfoInstallConfig
  * Add API to get all short-ids from an OsinfoProduct
  * Improve OsinfoLoader in order to fully support multiple short-ids values on
    an OsinfoProduct
  * Improve osinfo-detect tool's help wording
  * Improve osinfo-detect tool, making it aware of OsinfoTree's OS variants
  * Fix the loading of the architecture value of OsinfoImages
  * Fix usage of application id on media detection
  * Accept "all" as a valid fallback architecture for OsinfoTrees &amp; OsinfoMedias
  * Improve treeinfo check by checking for both ".treeinfo" and "treeinfo" files
  * Explicitly set GVFS as a requirement in the project spec file
  * Move osinfo-db related tests to osinfo-db project
- Drop
  0001-media-Fix-usage-of-application-id.patch
  0002-loader-Properly-load-the-arch-value-for-images.patch</changelog>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
</package>
<package pkgid="dc013aa4a508b2a25a0777b97cc6fe27ef1e6b3886153ea1784679c14df7ebe8" name="typelib-1_0-LibvirtGLib-1_0" arch="x86_64">
  <version epoch="0" ver="3.0.0" rel="1.95"/>
  <changelog author="zaitor@opensuse.org" date="1408536000">- Update to version 0.1.9:
  + Add support for spiceport chardev.
  + Misc fixes to build system.
  + Fix ref counting of snapshot devices.
  + Add API for deleting snapshots.
  + Fix RPM layout for vala files.
  + Fix race in build of vala code.
  + Add API for getting security models.
  + Add classes for dealing with CPU models.
  + Fix enum generation.
  + Add API for fetching snapshots.
- Drop 0b4d331b-secmodel-caps.patch: Fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.2.0:
  + Support keyboard input device config.
  + Annotate some unused parameters.
  + Add support for new graphics attach API.</changelog>
  <changelog author="zaitor@opensuse.org" date="1435233600">- Update to version 0.2.1:
  + Fix libtoolize detection in autogen.sh.
  + Allow storage volume format compatibility level to be set.
  + Add pre-condition checks to more public API entry points.
  + Don't try to return a value from void functions.
  + Add API for controlling storage pool autostart flag.
  + Add API for filesystem image format.
  + Add loop, nbd and ploop filesystem types.
  + Fix setting of driver type when called more than once.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1436270400">- Fix setting file system type and format.
  bsc#936841 46897c1b-fs-type-fix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1437652800">- Update to version 0.2.2:
  + Add API for getting interface MAC address.
  + Simplify implementation of object listing APIs.
  + Fix memory leaks of virConnect objects.
  + Port to use GTask instead of GSimpleAsyncResult.
  + Add API to get list of physical network interfaces.
  + Add API to get list of virtual networks.
  + Add API to get DHCP address of virtual networks.
  + Avoid overwriting filesystem type when setting format.
  + Include XML data for tests in dist.
  + Add support for UNIX chardev sources.
  + Fix test linking on platforms with strict linker deps.
  + Add ability to set video ram + vgamem.
- Drop 46897c1b-fs-type-fix.patch: Fixed upstream.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1450526400">- Update to version 0.2.3:
  + virt-admin and administration API.
  + Various improvements in virtio devices support.
  + Log daemon: logging improvements and protocol.
  + network: selectively disable -Wcast-align in
    virNetDevParseDadStatus.
  + log_manager: Include configmake.h last.
  + virtlogd:
  - Fix build without DBus.
  - Use %llu to print 64bit types.</changelog>
  <changelog author="zaitor@opensuse.org" date="1479211200">- Update to version 1.0.0:
  + Switch to new release numbering scheme, major digit incremented
    each year, minor for each release, micro for stable branches
    (if any).
  + Fix Libs.private variable in pkg-config file.
  + Fix git introspection warnings.
  + Add ability to set SPICE gl property.
  + Add support for virtio video model.
  + Add support for 3d accel property.
  + Add support for querying video model.
  + Add support for host device config for PCI devs.
  + Add docs for more APIs.
  + Avoid unused variable warnings.
  + Fix check for libvirt optional features to use pkg-config.
  + Delete manually written python binding. All apps should use
    PyGObject with gobject introspection.
  + Allow schema to be NULL on config objects.
  + Preserve unknown devices listed in XML.
  + Add further test coverage.
- Add gpg signed source.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 2.0.0:
  + Increase min libvirt to 1.2.5.
  + Increase min glib to 2.38.
  + Fix example program event detail strings.
  + Set LC_CTYPE=en_US.UTF-8 when running python apps.
  + Don't relay on non-portable paths.
  + Fix sha-bang lines for portability.
  + Remove bogus casts for g_object_ref args.
  + Disable -Wcast-function-type warnings.
  + Modernize gobject macro usage.
  + Allow adding namespace to child nodes.
  + Add ICH9 audio support.
  + Add API for getting machine type.
  + Updated translations.
- Add fdupes BuildRequires and macro: Remove duplicates.</changelog>
  <changelog author="jfehlig@suse.com" date="1575374400">- Update to version 3.0.0
  + Add support for bochs video device
  + Add API to query firmware config
  + Improve testing coverage
  + Validate min/max glib API versions in use
  + Remove deprecated G_PARAM_PRIVATE
  + Fix docs build linking problems
  + Convert python demos to be python 3 compatible &amp; use
    modern best practice for pyobject introspection bindings
  + Add API to query domain capaibilities
  + Refresh translations
  + Simplify build process for handling translations
  + Fix some memory leaks
  + Add API for setting storage volume features
  + boo#1158282</changelog>
</package>
<package pkgid="b3cb60c038e0f8cefdfd799c2ae963a81a87d9005621651a31e9e0faac80acd3" name="typelib-1_0-NM-1_0" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="3.10.1"/>
  <changelog author="mgorse@suse.com" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="werner@suse.de" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="hpj@urpla.net" date="1604059200">- Exclude systemd.automount from nfs processing: fix boo#1116625
  as suggested from Neil Brown</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1621339200">- Add nm-add-CAP_CHOWN-capability.patch: Add CAP_CHOWN to
  CapabilityBoundingSet to make teamd work properly
  (glfo#NetworkManager/NetworkManager!860, bsc#1185424).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
</package>
<package pkgid="a427731147c70dcacc6be93f6657b08389031ad2a54e41a5810ec767c049c78b" name="typelib-1_0-Pango-1_0" arch="x86_64">
  <version epoch="0" ver="1.44.7+11" rel="1.25"/>
  <changelog author="bjorn.lie@gmail.com" date="1564833600">- Update to version 1.44.2:
  + Disable ligatures when letterspacing.
  + Set design coords on hb_font_t.
  + Expose more font options in pango-view.
  + OS X: Make 'system-ui' font work.
  + Keep deprecated pango-fc apis in headers.
  + Make hex boxes work, always.
  + introspection:
  - Various build fixes.
  - Add PangoPT, PangoFT2 namespaces.
  + layout: Make the new line-spacing opt-in.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564920000">- Update to version 1.44.3:
  + Install pango-ot headers.
  + Make subpixel positioning optional.
  + fc: Ignore fonts with unsupported formats.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Update to version 1.44.4:
  + Add an insert-hyphens attribute.
  + Reinstate the return type of pango_fc_font_lock_face.
  + Fix a problem with ellipses getting the wrong font.
  + fc: Improve filtering by font format.
  + Re-add PangoFcFont to public headers.
  + Install PangoFc and PangoOT introspection files.
  + Fix ink rectangles to have positive height.
  + Fix mark positioning.
  + Switch to using harfbuzz for metrics.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 1.44.5:
  + Revert a broken change (causing crashes on OS X).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567512000">- Update to version 1.44.6:
  + docs: Fix symbol indices.
  + Fix Thai line breaking.
  + Re-add symbols needed by some bindings.
  + Don't insert hyphens for some languages.
  + Fix a crash with hyphenation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568462400">- Modernize spec, prepare for possible spliting of package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570795200">- Switch to git-checkout via source service, explicit tag. Upstream
  tarball is borked.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572004800">- Update to version 1.44.7:
  + Fix tests without libthai.
  + Small speedup to Emoji iteration.
  + Bring back PangoFontsetSimple (pygtk bind it).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572696000">- Update to version 1.44.7+8:
  + Undo fontset deprecations.
  + Adjust expected test outputs.
  + Fix ItemProperties handling.
  + Don't treat rise as a no-shape attribute.
  + Drop an unused ItemProperties use.
  + Go back to ignoring underlines for itemization.
  + fc: remove another assertion that might trigger.
- Switch to using pango 1.44 stable git branch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574856000">- Update to version 1.44.7+11:
  * Add a test for ellipsis shaping
  * Use shape flags for ellipsis
  * test-shape: Cosmetics</changelog>
</package>
<package pkgid="4d95a1ed1a0dd87f6c1c9dac34f480890c4752bb8399e07d68924434424dfa7b" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20210208" rel="2.4"/>
  <changelog author="lnussel@suse.de" date="1603108800">- use %_firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1603972800">- Update to version 20201023 (git commit dae4b4cd0841):
  * cypress: add Cypress firmware and clm_blob files
  * rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  * ath10k: add SDIO firmware for QCA9377 WiFi
  * ice: update package file to 1.3.16.0
  * mediatek: separate venc service thread
  * QCA : Updated firmware file for WCN3991
  * iwlwifi: update and add new FWs from core56-54 release
  * iwlwifi: update 3168, 7265D, 8000C and 8265 firmwares
  * i915: Add DG1 DMC v2.02
  * qcom : updated venus firmware files for v5.4
- Add _constraints to fix the build error (bsc#1178242)</changelog>
  <changelog author="tiwai@suse.com" date="1606046400">- Update to version 20201120 (bc9cd0b7b0e9):
  including AMDGPU update (bsc#1179062) and ath11k addition (bsc#1178274)
  * linux-firmware: Update AMD SEV firmware
  * amdgpu: add sienna cichlid firmware for 20.45
  * amdgpu: update vega20 firmware for 20.45
  * amdgpu: update vega12 firmware for 20.45
  * amdgpu: update vega10 firmware for 20.45
  * amdgpu: update renoir firmware for 20.45
  * amdgpu: update navi14 firmware for 20.45
  * amdgpu: update navi12 firmware for 20.45
  * amdgpu: update navi10 firmware for 20.45
  * amdgpu: update raven2 firmware for 20.45
  * amdgpu: update raven firmware for 20.45
  * rtlwifi: v88.2 firmware files for RTL8192CU
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * Revert "rtw88: RTL8822C: Update firmware to v9.9.4"
  * vpdma: Move firmware to ti directory
  * amdgpu: update picasso VCN firmware
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * rtw88: RTL8822C: Update firmware to v9.9.4
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  * QCA: Update Bluetooth firmware for QCA6390
  * qcom : updated venus firmware files for v5.4
  * QCA : Fixed BT SSR due to command timeout / IO fatal error
  * ath11k: QCA6390 hw2.0: add to WLAN.HST.1.0.1-01740-QCAHSTSWPLZ_V2_TO_X86-1
  * ath11k: QCA6390 hw2.0: add board-2.bin
  * ath11k: IPQ8074 hw2.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ8074 hw2.0: add board-2.bin
  * ath11k: IPQ6018 hw1.0: add to WLAN.HK.2.1.0.1-01238-QCAHKSWPL_SILICONZ-2
  * ath11k: IPQ6018 hw1.0: add board-2.bin
  * ath10k: QCA6174 hw3.0: add firmware-sdio-6.bin version WLAN.RMH.4.4.1-00077
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00131
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00157-QCARMSWPZ-1
- ath11k is split into its own subpackage due to its size
- Update topics list and aliases accordingly</changelog>
  <changelog author="tiwai@suse.de" date="1606132800">- Fix build with older distros due to missing _firmwaredir</changelog>
  <changelog author="tiwai@suse.com" date="1606996800">- Update to version 20201130 (git commit 7455a3606674):
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * i915: Add GuC firmware v49.0.1 for all platforms
  * i915: Remove duplicate KBL DMC entry
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2018</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608033600">- add banana pi brcm wireless symlinks to extrawhence</changelog>
  <changelog author="tiwai@suse.com" date="1609156800">- Update to version 20201218 (git commit 646f159690e2):
  * make AP6212 in bananpi m2 plus/zero work
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: add firmware for Lontium LT9611UXC DSI to HDMI bridge
  * mediatek: update MT8173 VPU firmware to v1.1.6
  * QCA : Updated firmware files for WCN3991
- Remove the already upstreamed extrawhence entry
- Update topic entry for lt9611uxc
- Update aliases from 5.10.x kernels</changelog>
  <changelog author="tiwai@suse.com" date="1611748800">- Update to version 20210119 (git commit 05789708b79b):
  * brcm: Link RPi4's WiFi firmware with DMI machine name.
  * brcm: Add NVRAM for Vamrs 96boards Rock960
  * brcm: Update Raspberry Pi 3B+/4B NVRAM for downstream changes
  * cypress: Fix link direction
  * cypress: Link the new cypress firmware to the old brcm files
  * brcm: remove old brcm firmwares that have newer cypress variants
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x059A_25CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099a_7253
  * rtl_bt: Add firmware and config files for RTL8852A BT USB chip
  * rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x829a_7644
- Fix install-split.sh to deal with the quoted spaces
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1612872000">- Update to version 20210208 (commit b79d2396bc63):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304
  * linux-firmware: add firmware for MT7921
  * rtw88: RTL8821C: Update firmware to v24.8
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * i915: Add DMC v2.01 for ADL-S
  * i915: Add HuC v7.7.1 for DG1
  * i915: Add GuC v49.0.1 for DG1
  * qcom: Add venus firmware files for VPU-1.0
  * qcom: Add SM8250 Compute DSP firmware
  * qcom: Add SM8250 Audio DSP firmware
  * qcom: add firmware files for Adreno a650</changelog>
  <changelog author="tiwai@suse.de" date="1613476800">- Correct the RPi4 brcm config to recover the WiFi breakage
  (bsc#1182320):
  Revert-brcm-rpi4-boardflags3-bit.patch</changelog>
</package>
<package pkgid="e7729712af48380d6863ef1f9212af503edd777fb1143bb431cfc2a406c48a30" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20220207" rel="10.1"/>
  <changelog author="meissner@suse.com" date="1591185600">- Updated Intel CPU Microcode to 20200602 (prerelease) (bsc#1172466)
  Fixes for:
  - CVE-2020-0543: Fixed a side channel attack against special registers
    which could have resulted in leaking of read values to cores other
    than the one which called it.  This attack is known as Special Register
    Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1154824).
  - CVE-2020-0548,CVE-2020-0549: Additional ucode updates were supplied to
    mitigate the Vector Register and L1D Eviction Sampling aka "CacheOutAttack"
    attacks. (bsc#1156353)
  == 20200602_DEMO Release ==
  - - Updates upon 20200520 release --
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  HSW          C0       6-3c-3/32 00000027-&gt;00000028 Core Gen4
  BDW-U/Y      E0/F0    6-3d-4/c0 0000002e-&gt;0000002f Core Gen5
  HSW-U        C0/D0    6-45-1/72 00000025-&gt;00000026 Core Gen4
  HSW-H        C0       6-46-1/32 0000001b-&gt;0000001c Core Gen4
  BDW-H/E3     E0/G0    6-47-1/22 00000021-&gt;00000022 Core Gen5
  SKL-U/Y      D0       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKL-U23e     K1       6-4e-3/c0 000000d6-&gt;000000dc Core Gen6 Mobile
  SKX-SP       B1       6-55-3/97 01000151-&gt;01000157 Xeon Scalable
  SKX-SP       H0/M0/U0 6-55-4/b7 02000065-&gt;02006906 Xeon Scalable
  SKX-D        M1       6-55-4/b7 02000065-&gt;02006906 Xeon D-21xx
  CLX-SP       B0       6-55-6/bf 0400002c-&gt;04002f01 Xeon Scalable Gen2
  CLX-SP       B1       6-55-7/bf 0500002c-&gt;04002f01 Xeon Scalable Gen2
  SKL-H/S      R0/N0    6-5e-3/36 000000d6-&gt;000000dc Core Gen6; Xeon E3 v5
  AML-Y22      H0       6-8e-9/10 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-U/Y      H0       6-8e-9/c0 000000ca-&gt;000000d6 Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 000000ca-&gt;000000d6 Core Gen8 Mobile
  WHL-U        W0       6-8e-b/d0 000000ca-&gt;000000d6 Core Gen8 Mobile
  AML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  CML-Y42      V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen10 Mobile
  WHL-U        V0       6-8e-c/94 000000ca-&gt;000000d6 Core Gen8 Mobile
  KBL-G/H/S/E3 B0       6-9e-9/2a 000000ca-&gt;000000d6 Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 000000ca-&gt;000000d6 Core Gen8 Desktop, Mobile, Xeon E
  CFL-S        B0       6-9e-b/02 000000ca-&gt;000000d6 Core Gen8
  CFL-H/S      P0       6-9e-c/22 000000ca-&gt;000000d6 Core Gen9
  CFL-H        R0       6-9e-d/22 000000ca-&gt;000000d6 Core Gen9 Mobile
- Updated Intel CPU Microcode to 20200520
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  - --- updated platforms ------------------------------------
  SNB-E/EN/EP  C1/M0    6-2d-6/6d 0000061f-&gt;00000621 Xeon E3/E5, Core X
  SNB-E/EN/EP  C2/M1    6-2d-7/6d 00000718-&gt;0000071a Xeon E3/E5, Core X</changelog>
  <changelog author="meissner@suse.com" date="1592222400">- Updated Intel CPU Microcode to 20200609 official release (bsc#1172466)
  - no changes to 20200602 prerelease</changelog>
  <changelog author="meissner@suse.com" date="1592395200">- Updated Intel CPU Microcode to 20200616 official release (bsc#1172856)
  - revert 06-4e-03 Skylake U/Y, U23e ucode back to 000000d6 release
  - revert 06-5e-03 Skylake H/S ucode back to 000000d6 release,
    as both cause stability issues.  (bsc#1172856)</changelog>
  <changelog author="meissner@suse.com" date="1604491200">- Updated Intel CPU Microcode to 20201027 prerelease (bsc#1170446)
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX)
  [#] New Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#] Updated Platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605096000">- Updated Intel CPU Microcode to 20201110 official release.
  - CVE-2020-8695: Fixed Intel RAPL sidechannel attack (SGX) (bsc#1170446)
  - CVE-2020-8698: Fixed Fast Store Forward Predictor INTEL-SA-00381 (bsc#1173594)
  - CVE-2020-8696: Vector Register Sampling Active INTEL-SA-00381 (bsc#1173592)
- Releasenotes:
  - Security updates for [INTEL-SA-00381](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00381.html).
  - Security updates for [INTEL-SA-00389](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00389.html).
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
  - Update for functional issues. Refer to [10th Gen Intel Core? Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
  - Update for functional issues. Refer to [8th and 9th Gen Intel Core? Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
  - Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
  - Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
  [#]## New Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CPX-SP         | A1       | 06-55-0b/bf |          | 0700001e | Xeon Scalable Gen3
  | LKF            | B2/B3    | 06-8a-01/10 |          | 00000028 | Core w/Hybrid Technology
  | TGL            | B1       | 06-8c-01/80 |          | 00000068 | Core Gen11 Mobile
  | CML-H          | R1       | 06-a5-02/20 |          | 000000e0 | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 |          | 000000e0 | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 |          | 000000e0 | Core Gen10
  | CML-U62 V2     | K0       | 06-a6-01/80 |          | 000000e0 | Core Gen10 Mobile
  [#]## Updated Platforms
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000043 | 00000044 | Core Gen4 X series; Xeon E5 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000d6 | 000000e2 | Core Gen6 Mobile
  | SKX-SP         | B1       | 06-55-03/97 | 01000157 | 01000159 | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | 02006a08 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006906 | 02006a08 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04002f01 | 04003003 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05002f01 | 05003003 | Xeon Scalable Gen2
  | APL            | D0       | 06-5c-09/03 | 00000038 | 00000040 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 00000016 | 0000001e | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000d6 | 000000e2 | Core Gen6; Xeon E3 v5
  | GKL-R          | R0       | 06-7a-08/01 | 00000016 | 00000018 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 00000078 | 000000a0 | Core Gen10 Mobile
  | AML-Y22        | H0       | 06-8e-09/10 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000d6 | 000000de | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000d6 | 000000e0 | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000d6 | 000000de | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000d6 | 000000de | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000d6 | 000000de | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000d6 | 000000de | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000d6 | 000000de | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000d6 | 000000de | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000d6 | 000000de | Core Gen9 Mobile
  | CML-U62        | A0       | 06-a6-00/80 | 000000ca | 000000e0 | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1605787200">- Updated Intel CPU Microcode to 20201118 official release. (bsc#1178971)
  - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms.</changelog>
  <changelog author="meissner@suse.com" date="1607342400">- Reverted 3 microcodes back to 20200616 release level after regression reports. (bsc#1179224)
  - SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006906 | Xeon Scalable
  - SKX-D          | M1       | 06-55-04/b7 | 02006906 | Xeon D-21xx
  - CLX-SP         | B0       | 06-55-06/bf | 04002f01 | Xeon Scalable Gen2
  - CLX-SP         | B1       | 06-55-07/bf | 05002f01 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1613563200">- Updated Intel CPU Microcode to 20210216 official release. (bsc#1178971 bsc#1179224)
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a08 | 02006a0a | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003003 | 04003006 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003003 | 05003006 | Xeon Scalable Gen2</changelog>
  <changelog author="meissner@suse.com" date="1623153600">- Updated to Intel CPU Microcode 20210525 release.
  - CVE-2020-24513: A domain bypass transient execution vulnerability was discovered on some Intel Atom processors that use a micro-architectural incident channel. (INTEL-SA-00465 bsc#1179833)
    See also: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html
  - CVE-2020-24511: The IBRS feature to mitigate Spectre variant 2 transient execution side channel vulnerabilities may not fully prevent non-root (guest) branches from controlling the branch predictions of the root (host) (INTEL-SA-00464 bsc#1179836)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24512: Fixed trivial data value cache-lines such as all-zero value cache-lines may lead to changes in cache-allocation or write-back behavior for such cache-lines (bsc#1179837 INTEL-SA-00464)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00464.html)
  - CVE-2020-24489: Fixed Intel VT-d device pass through potential local privilege escalation (INTEL-SA-00442 bsc#1179839)
    See also https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00442.html
- Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780)for details.
- Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
- Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/613537) for details.
- Update for functional issues. Refer to [Intel Xeon Processor D-1500, D-1500 NS and D-1600 NS Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-d-1500-specification-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E7-8800 and E7-4800 v3 Processor Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e7-v3-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon Processor E5 v3 Product Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e5-v3-spec-update.html?wapkw=processor+spec+update+e5) for details.
- Update for functional issues. Refer to [10th Gen Intel Core Processor Families Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/10th-gen-core-families-specification-update.html) for details.
- Update for functional issues. Refer to [8th and 9th Gen Intel Core Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-spec-update.html) for details.
- Update for functional issues. Refer to [7th Gen and 8th Gen (U Quad-Core) Intel Processor Families Specification Update](https://www.intel.com/content/www/us/en/processors/core/7th-gen-core-family-spec-update.html) for details.
- Update for functional issues. Refer to [6th Gen Intel Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/332689) for details.
- Update for functional issues. Refer to [Intel Xeon E3-1200 v6 Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/xeon-e3-1200v6-spec-update.html) for details.
- Update for functional issues. Refer to [Intel Xeon E-2100 and E-2200 Processor Family Specification Update](https://www.intel.com/content/www/us/en/products/docs/processors/xeon/xeon-e-2100-specification-update.html) for details.
- New platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | CLX-SP         | A0       | 06-55-05/b7 |          | 03000010 | Xeon Scalable Gen2
  | ICX-SP         | C0       | 06-6a-05/87 |          | 0c0002f0 | Xeon Scalable Gen3
  | ICX-SP         | D0       | 06-6a-06/87 |          | 0d0002a0 | Xeon Scalable Gen3
  | SNR            | B0       | 06-86-04/01 |          | 0b00000f | Atom P59xxB
  | SNR            | B1       | 06-86-05/01 |          | 0b00000f | Atom P59xxB
  | TGL            | B1       | 06-8c-01/80 |          | 00000088 | Core Gen11 Mobile
  | TGL-R          | C0       | 06-8c-02/c2 |          | 00000016 | Core Gen11 Mobile
  | TGL-H          | R0       | 06-8d-01/c2 |          | 0000002c | Core Gen11 Mobile
  | EHL            | B1       | 06-96-01/01 |          | 00000011 | Pentium J6426/N6415, Celeron J6412/J6413/N6210/N6211, Atom x6000E
  | JSL            | A0/A1    | 06-9c-00/01 |          | 0000001d | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105
  | RKL-S          | B0       | 06-a7-01/02 |          | 00000040 | Core Gen11
- Updated platforms:
  | Processor      | Stepping | F-M-S/PI    | Old Ver  | New Ver  | Products
  |:---------------|:---------|:------------|:---------|:---------|:---------
  | HSX-E/EP       | Cx/M1    | 06-3f-02/6f | 00000044 | 00000046 | Core Gen4 X series; Xeon E5 v3
  | HSX-EX         | E0       | 06-3f-04/80 | 00000016 | 00000019 | Xeon E7 v3
  | SKL-U/Y        | D0       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | SKL-U23e       | K1       | 06-4e-03/c0 | 000000e2 | 000000ea | Core Gen6 Mobile
  | BDX-ML         | B0/M0/R0 | 06-4f-01/ef | 0b000038 | 0b00003e | Xeon E5/E7 v4; Core i7-69xx/68xx
  | SKX-SP         | B1       | 06-55-03/97 | 01000159 | 0100015b | Xeon Scalable
  | SKX-SP         | H0/M0/U0 | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon Scalable
  | SKX-D          | M1       | 06-55-04/b7 | 02006a0a | 02006b06 | Xeon D-21xx
  | CLX-SP         | B0       | 06-55-06/bf | 04003006 | 04003102 | Xeon Scalable Gen2
  | CLX-SP         | B1       | 06-55-07/bf | 05003006 | 05003102 | Xeon Scalable Gen2
  | CPX-SP         | A1       | 06-55-0b/bf | 0700001e | 07002302 | Xeon Scalable Gen3
  | BDX-DE         | V2/V3    | 06-56-03/10 | 07000019 | 0700001b | Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  | BDX-DE         | Y0       | 06-56-04/10 | 0f000017 | 0f000019 | Xeon D-1557/59/67/71/77/81/87
  | BDX-NS         | A0       | 06-56-05/10 | 0e00000f | 0e000012 | Xeon D-1513N/23/33/43/53
  | APL            | D0       | 06-5c-09/03 | 00000040 | 00000044 | Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  | APL            | E0       | 06-5c-0a/03 | 0000001e | 00000020 | Atom x5-E39xx
  | SKL-H/S        | R0/N0    | 06-5e-03/36 | 000000e2 | 000000ea | Core Gen6; Xeon E3 v5
  | DNV            | B0       | 06-5f-01/01 | 0000002e | 00000034 | Atom C Series
  | GLK            | B0       | 06-7a-01/01 | 00000034 | 00000036 | Pentium Silver N/J5xxx, Celeron N/J4xxx
  | GKL-R          | R0       | 06-7a-08/01 | 00000018 | 0000001a | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120
  | ICL-U/Y        | D1       | 06-7e-05/80 | 000000a0 | 000000a6 | Core Gen10 Mobile
  | LKF            | B2/B3    | 06-8a-01/10 | 00000028 | 0000002a | Core w/Hybrid Technology
  | AML-Y22        | H0       | 06-8e-09/10 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-U/Y        | H0       | 06-8e-09/c0 | 000000de | 000000ea | Core Gen7 Mobile
  | CFL-U43e       | D0       | 06-8e-0a/c0 | 000000e0 | 000000ea | Core Gen8 Mobile
  | WHL-U          | W0       | 06-8e-0b/d0 | 000000de | 000000ea | Core Gen8 Mobile
  | AML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | CML-Y42        | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen10 Mobile
  | WHL-U          | V0       | 06-8e-0c/94 | 000000de | 000000ea | Core Gen8 Mobile
  | KBL-G/H/S/E3   | B0       | 06-9e-09/2a | 000000de | 000000ea | Core Gen7; Xeon E3 v6
  | CFL-H/S/E3     | U0       | 06-9e-0a/22 | 000000de | 000000ea | Core Gen8 Desktop, Mobile, Xeon E
  | CFL-S          | B0       | 06-9e-0b/02 | 000000de | 000000ea | Core Gen8
  | CFL-H/S        | P0       | 06-9e-0c/22 | 000000de | 000000ea | Core Gen9
  | CFL-H          | R0       | 06-9e-0d/22 | 000000de | 000000ea | Core Gen9 Mobile
  | CML-H          | R1       | 06-a5-02/20 | 000000e0 | 000000ea | Core Gen10 Mobile
  | CML-S62        | G1       | 06-a5-03/22 | 000000e0 | 000000ea | Core Gen10
  | CML-S102       | Q0       | 06-a5-05/22 | 000000e0 | 000000ec | Core Gen10
  | CML-U62        | A0       | 06-a6-00/80 | 000000e0 | 000000e8 | Core Gen10 Mobile
  | CML-U62 V2     | K0       | 06-a6-01/80 | 000000e0 | 000000ea | Core Gen10 Mobile</changelog>
  <changelog author="meissner@suse.com" date="1644494400">- Updated to Intel CPU Microcode 20220207 release.
  - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615)
  - CVE-2021-0127: Intel Processor Breakpoint Control Flow (bsc#1195779)
  - CVE-2021-0145: Fast store forward predictor - Cross Domain Training (bsc#1195780)
  - CVE-2021-33120: Out of bounds read for some Intel Atom processors (bsc#1195781)
  - Security updates for [INTEL-SA-00528](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.html)
  - Security updates for [INTEL-SA-00532](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00532.html)
  - Update for functional issues. Refer to [Third Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/637780) for details.
  - Update for functional issues. Refer to [Second Generation Intel Xeon Processor Scalable Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338848) for details.
  - Update for functional issues. Refer to [Intel Xeon Processor Scalable Family Specification Update](https://www.intel.com/content/www/us/en/processors/xeon/scalable/xeon-scalable-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [11th Generation Intel Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/631123) for details.
  - Update for functional issues. Refer to [11th Generation Intel Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/634808) for details.
  - Update for functional issues. Refer to [10th Gen Intel Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/341079) for details.
  - Update for functional issues. Refer to [10th Generation Intel Core" Processor Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/615213) for details.
  - Update for functional issues. Refer to [8th Generation Intel Core" Processor Families Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/338025) for details.
  - Update for functional issues. Refer to [8th Gen Intel Core" Processor Family Spec Update](https://www.intel.com/content/www/us/en/products/docs/processors/core/8th-gen-core-family-spec-update.html?wapkw=processor+specification+update) for details.
  - Update for functional issues. Refer to [7th and 8th Generation Intel Core" Processor Family Specification Update](https://cdrdv2.intel.com/v1/dl/getContent/334663) for details.
  - Update for functional issues. Refer to [6th Generation Intel Processor Family Specification Update](https://www.intel.com/content/www/us/en/processors/core/desktop-6th-gen-core-family-spec-update.html) for details.
  - Update for functional issues. Refer to [Intel Pentium Silver and Intel Celeron Processors](https://www.intel.com/content/www/us/en/products/docs/processors/pentium/silver-celeron-spec-update.html?wapkw=processor+specification+update) for details.</changelog>
</package>
<package pkgid="bb5c9f35f37592c750e5c9ac3e127f2bd527f12c1b6219ce6eeb83c51ae4308c" name="udev" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.39.1"/>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-drop-or-soften-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch</changelog>
</package>
<package pkgid="02cb641f17f7af72785649ad9bedec44943886a4828e38915af8da48e3cf59cf" name="update-alternatives" arch="x86_64">
  <version epoch="0" ver="1.19.0.4" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1464696000">- Require touch in post phase bnc#982336</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Use ls . instead of * to avoid error when nothing is in alternatives
  directory</changelog>
  <changelog author="tchvatal@suse.com" date="1473249601">- Version update to 1.18.10:
  * Various few fixes, see changelog file in the package
  * Refresh patch update-alternatives-suse.patch
  * Remove patch dpkg-sparc.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 1.18.23:
  * Various small fixes and memleaks removed
- Make sure to generate manpage
- Refresh patch update-alternatives-suse.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Silence the update-alternatives regen output wrt bsc#1050848
  it causes more confusion than benefits</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Use dbpath macro for locationg rpm state directory
- Require exactly same version of rpm we had when building to make
  sure dbpath matches</changelog>
  <changelog author="mpluskal@suse.com" date="1511179200">- Move update alternatives database to new location
- Update rpm requirements to avoid unnecessary builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Migrate u-a data from /var/lib/rpm instead of relying on dbpath:
  no u-a version ever installed files explicitly into dbpath, but
  always hard specified /var/lib/rpm. The fact that RPM moved its
  database is irrelevant to update-alternatives. In case RPM moved
  it's database, our files are still accessible via the
  /var/lib/rpm symlink being put in place.
- Drop the arbitrary depenency on a specific rpm version: the idea
  was to ensure to have an rpm with the new dbpath location in
  place. For one, the dependency does not work as intended, and
  2nd, as the migration now happens explicitly from the old u-a
  admindir without relying on dbpath, is no longer needed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516104000">- Update to 1.19.0.4:
  * No changes in update-alternatives just match step with dpkg
- Drop patch 0001-In-case-of-equal-priority-rather-update.patch
  * Causes issues on too eagerly regenerating stuff bsc#1075971
  * Reason for this patch should no longer be needed as all python
    packages are singlespec
  * Also drop the post override</changelog>
  <changelog author="pgajdos@suse.com" date="1644580800">- break bash &lt;-&gt; update-alternatives cycle by coolo's rewrite
  of %post in lua [bsc#1195654]</changelog>
</package>
<package pkgid="1a96dcb9d290d0900b5f8ce5ad39701fbbe3d532616794d9cc37d30d75be2561" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="281c161e10c8c416714673127353d9327a3a7dafebd826043e6a78572a366f00" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.36.2" rel="150300.4.17.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="tabraham@suse.com" date="1627387200">- blockdev: allow for larger values for start sector (bsc#1188507)
  blockdev-allow-for-larger-values-for-start-sector.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
</package>
<package pkgid="1e7e422141061471843001e55d754d65553d32da353e523c5d452e3cc769ef5e" name="vim-data-common" arch="noarch">
  <version epoch="0" ver="8.0.1568" rel="5.17.1"/>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
</package>
<package pkgid="e8dcf3d7afec3a1bf2f01089e1cc1cca7c80ea095841985914fe6e0bc5a4373f" name="vim-small" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="5.17.1"/>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="lnussel@suse.de" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="idonmez@suse.com" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="lnussel@suse.de" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="lnussel@suse.de" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="lnussel@suse.de" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
  <changelog author="zbalogh@suse.com" date="1645185600">- Minimal fix for Bug 1195004 - (CVE-2022-0318) VUL-0: CVE-2022-0318: vim:
  Heap-based Buffer Overflow in vim prior to 8.2.
  / vim-8.0.1568-CVE-2022-0413.patch
- Fixing bsc#1190570 CVE-2021-3796: vim: use-after-free in nv_replace() in
  normal.c / vim-8.0.1568-CVE-2021-3796.patch
- Fixing bsc#1191893 CVE-2021-3872: vim: heap-based buffer overflow in
  win_redr_status() drawscreen.c / vim-8.0.1568-CVE-2021-3872.patch
- Fixing bsc#1192481 CVE-2021-3927: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-3927.patch
- Fixing bsc#1192478 CVE-2021-3928: vim: vim is vulnerable to
  Stack-based Buffer Overflow / vim-8.0.1568-CVE-2021-3928.patch
- Fixing bsc#1193294 CVE-2021-4019: vim: vim is vulnerable to
  Heap-based Buffer Overflow / vim-8.0.1568-CVE-2021-4019.patch
- Fixing bsc#1193298 CVE-2021-3984: vim: illegal memory access when C-indenting
  could lead to Heap Buffer Overflow / vim-8.0.1568-CVE-2021-3984.patch
- Fixing bsc#1190533 CVE-2021-3778: vim: Heap-based Buffer Overflow in regexp_nfa.c
  / vim-8.0.1568-CVE-2021-3778.patch
- Fixing bsc#1194216 CVE-2021-4193: vim: vulnerable to Out-of-bounds Read
  / vim-8.0.1568-CVE-2021-4193.patch
- Fixing bsc#1194556 CVE-2021-46059: vim: A Pointer Dereference vulnerability
  exists in Vim 8.2.3883 via the vim_regexec_multi function at regexp.c, which
  causes a denial of service. / vim-8.0.1568-CVE-2021-46059.patch
- Fixing bsc#1195066 CVE-2022-0319: vim: Out-of-bounds Read in vim/vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0319.patch
- Fixing bsc#1195126 CVE-2022-0351: vim: uncontrolled recursion in eval7()
  / vim-8.0.1568-CVE-2022-0351.patch
- Fixing bsc#1195202 CVE-2022-0361: vim: Heap-based Buffer Overflow in vim
  prior to 8.2. / vim-8.0.1568-CVE-2022-0361.patch
- Fixing bsc#1195356 CVE-2022-0413: vim: use after free in src/ex_cmds.c
  / vim-8.0.1568-CVE-2022-0413.patch</changelog>
</package>
<package pkgid="4427bda6a72c684cf4517cd86c64955c800835f3bd786999a472c9261bb21f11" name="virt-install" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="7.7.1"/>
  <changelog author="carnold@suse.com" date="1609848000">- bsc#1180047 - [xen][virt-manger] Libvirt or Hyperisor does not
  support UEFI for 15SP3 XENPV Guest
  virtman-show-no-firmware-for-xenpv.patch</changelog>
  <changelog author="carnold@suse.com" date="1610020800">- bsc#1180069 - L3: virsh edit Error: XML document failed to
  validate against schema: Unable to validate doc.
  virtinst-smbios-unsupported-for-xenpv.patch</changelog>
  <changelog author="carnold@suse.com" date="1611576000">- bsc#1181350 - [Build 20210122] openQA test fails in virt_install
  on aarch64
  virtman-show-no-firmware-for-xenpv.patch</changelog>
  <changelog author="carnold@suse.com" date="1611576001">- bsc#1180897 - SLES15 SP2: VM does not boot after virt-install
  installing from ISO image.
  virtinst-keep-iso-for-xenpv.patch</changelog>
  <changelog author="acho@suse.com" date="1614168000">- bsc#1178926 - Unable to find any master var for loader
  /usr/share/qemu/{bios.bin, bios-256k.bin}
  virtman-legacy-bios-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1618228800">- Add support for detecting SUSE Linux Enterprise Micro. See also
  the osinfo-db package for the SLEM OS description file.
  virtinst-add-slem-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1624276800">- Upstream bug fixes (bsc#1027942)
  d3c627f1-volumeupload-Use-1MiB-read-size.patch
  cf93e2db-console-fix-error-with-old-pygobject.patch
  143c6bef-virtinst-fix-error-message-format-string.patch
  fe8722e7-createnet-Remove-some-unnecessary-max_length-annotations.patch
  d9b5090e-Fix-forgetting-password-from-keyring.patch</changelog>
  <changelog author="carnold@suse.com" date="1631102400">- bsc#1190215 - [virt-install] No Support for SUSE Product SLE-HPC
  virtinst-add-sle-hpc-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1634040000">- bsc#1191358 - The Virtual Machine Manager shows disconnected
  after rebooting virtual machine in Xen mode in SLES15 SP3.
  virtman-init-viewer-on-reboot.patch</changelog>
  <changelog author="carnold@suse.com" date="1635422400">- bsc#1188223 - L3: Sles12sp3 DomU won't boot after adding phys
  hard drive
  virtinst-xenbus-disk-index-fix.patch</changelog>
</package>
<package pkgid="2015ce2f6847c391107236f8071591bb50123ac8542f3f6f02feb39af24419bf" name="virt-manager-common" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="7.7.1"/>
  <changelog author="carnold@suse.com" date="1609848000">- bsc#1180047 - [xen][virt-manger] Libvirt or Hyperisor does not
  support UEFI for 15SP3 XENPV Guest
  virtman-show-no-firmware-for-xenpv.patch</changelog>
  <changelog author="carnold@suse.com" date="1610020800">- bsc#1180069 - L3: virsh edit Error: XML document failed to
  validate against schema: Unable to validate doc.
  virtinst-smbios-unsupported-for-xenpv.patch</changelog>
  <changelog author="carnold@suse.com" date="1611576000">- bsc#1181350 - [Build 20210122] openQA test fails in virt_install
  on aarch64
  virtman-show-no-firmware-for-xenpv.patch</changelog>
  <changelog author="carnold@suse.com" date="1611576001">- bsc#1180897 - SLES15 SP2: VM does not boot after virt-install
  installing from ISO image.
  virtinst-keep-iso-for-xenpv.patch</changelog>
  <changelog author="acho@suse.com" date="1614168000">- bsc#1178926 - Unable to find any master var for loader
  /usr/share/qemu/{bios.bin, bios-256k.bin}
  virtman-legacy-bios-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1618228800">- Add support for detecting SUSE Linux Enterprise Micro. See also
  the osinfo-db package for the SLEM OS description file.
  virtinst-add-slem-detection-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1624276800">- Upstream bug fixes (bsc#1027942)
  d3c627f1-volumeupload-Use-1MiB-read-size.patch
  cf93e2db-console-fix-error-with-old-pygobject.patch
  143c6bef-virtinst-fix-error-message-format-string.patch
  fe8722e7-createnet-Remove-some-unnecessary-max_length-annotations.patch
  d9b5090e-Fix-forgetting-password-from-keyring.patch</changelog>
  <changelog author="carnold@suse.com" date="1631102400">- bsc#1190215 - [virt-install] No Support for SUSE Product SLE-HPC
  virtinst-add-sle-hpc-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1634040000">- bsc#1191358 - The Virtual Machine Manager shows disconnected
  after rebooting virtual machine in Xen mode in SLES15 SP3.
  virtman-init-viewer-on-reboot.patch</changelog>
  <changelog author="carnold@suse.com" date="1635422400">- bsc#1188223 - L3: Sles12sp3 DomU won't boot after adding phys
  hard drive
  virtinst-xenbus-disk-index-fix.patch</changelog>
</package>
<package pkgid="c94744c90820158273e0f00618db7e686128245dd5088fca25306925b6c5ab21" name="vlan" arch="x86_64">
  <version epoch="0" ver="1.9" rel="1.27"/>
  <changelog author="poeml@suse.de" date="1078488000">- update to 1.8
- vlan.1.6-strings.patch dropped, is fixed upstreams</changelog>
  <changelog author="schwab@suse.de" date="1137326400">- Don't strip binaries.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="poeml@suse.de" date="1143633600">- updated README for usage of hardware descriptions for ETHERDEVICE
  [#150771]</changelog>
  <changelog author="poeml@suse.de" date="1161950400">- update to 1.9:
  - Fixed error exit codes to be !0 (makes it behave much better in
    scripts.
  - there are also changes in macvlan_config.c, which we don't
    package though.</changelog>
  <changelog author="schwab@suse.de" date="1162814400">- Clean debris before building.</changelog>
  <changelog author="mt@suse.de" date="1197979200">- Removed obsolete hardware descriptions usage info from README
- Changed to install vconfig in /sbin for /usr on nfs (#285472)</changelog>
  <changelog author="rschweikert@suse.com" date="1327924800">- Changed install of vconfig to /usr/sbin as part of usr merge
  project. With having /usr on a remote fs is supported by
  initrd, thus this does not effect issues reported in (#285472)
  any more.</changelog>
  <changelog author="mt@suse.com" date="1329307200">- Corrected last change log entry.</changelog>
  <changelog author="mt@suse.com" date="1411560000">- Removed obsolete README.SuSE (fate#316521,bnc#888999),
  see ifcfg-vlan(5) manual page for actual informations.</changelog>
</package>
<package pkgid="07adff3ecab84ef204623a375262850bf14752fdb2f12e80a837843321815797" name="wallpaper-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="15.3.20210112" rel="lp153.1.26"/>
  <changelog author="lnussel@suse.de" date="1518696000">- Fix uninitialized $gfx_mode</changelog>
  <changelog author="lnussel@suse.de" date="1519819200">- update grub, gfxboot, xfce and yast themes (boo#1077654)</changelog>
  <changelog author="hellcp@opensuse.org" date="1521288000">- new icewm theme and fix for text entry in installer (boo#1084816)</changelog>
  <changelog author="hellcp@mailbox.org" date="1522756800">- Fix to boo#1087547, yast installation visibility</changelog>
  <changelog author="hellcp@mailbox.org" date="1524571200">- Added 5K wallpaper</changelog>
  <changelog author="hellcp@mailbox.org" date="1535112000">- Add fixes to role screen from Tumbleweed
- 15.1</changelog>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1551960000">- Add systemd logo icons
- Add LibreOffice branding
- optipng everything
- Base installer off of SVG</changelog>
  <changelog author="Lubos Kocman &lt;Lubos.Kocman+factory@suse.de&gt;" date="1563192000">- Bump to 15.2</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1580731200">- Sync with Tumbleweed</changelog>
  <changelog author="Stasiek Michalski &lt;stasiek@michalski.cc&gt;" date="1610452800">- Sync with Tumbleweed
- Bump to 15.3</changelog>
</package>
<package pkgid="d9510da5dd540d282d56fc15e50deb20117dec830723bdf2b7ab49d36212af22" name="which" arch="x86_64">
  <version epoch="0" ver="2.21" rel="2.20"/>
  <changelog author="jengelh@inai.de" date="1358683200">- Split "which" off util-linux</changelog>
  <changelog author="astieger@suse.com" date="1427025600">- GNU which 2.21:
  * Upgraded code from bash to version 4.3 (now uses eaccess).
  * Fixed a bug related to getgroups / sysconfig that caused Which
    not to see more than 64 groups for a single user
  * Build system maintenance.
- Update project and source URL to GNU project</changelog>
  <changelog author="mpluskal@suse.com" date="1441800000">- Cleanup spec file with spec-cleaner
- Correct usage of info scriplets</changelog>
  <changelog author="tchvatal@suse.com" date="1465300800">- Move installinfo scriptlet to preun so it won't fail</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
</package>
<package pkgid="e915a5d97754826c06f768e9fa562bf07400000d1c2dbb3d6089d9a03b57a6c6" name="wicked" arch="x86_64">
  <version epoch="0" ver="0.6.68" rel="150300.4.5.1"/>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property makros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
</package>
<package pkgid="d4de4ab508597429312aa7509fee7110824b8c1c5d14e8215b0285bfc8c9a7a3" name="wicked-service" arch="x86_64">
  <version epoch="0" ver="0.6.68" rel="150300.4.5.1"/>
  <changelog author="rtorreromarijnissen@suse.com" date="1582718400">- version 0.6.62
- dhcp4: discard lease on client-id mismatch (CVE-2020-7217,bsc#1160906)
- dhcp4: free lease on response without message type (CVE-2020-7216,bsc#1160905)
- dhcp6: don't add free'd IA to ia_pd_list on T1&gt;T2 (CVE-2019-18903,bsc#1160904)
- dhcp6: fix use-after-free on option parsing failure (CVE-2019-18902,bsc#1160903)
- utils: don't reject NULL var array names/keys breaking wicked duid dump
- routes: schema fix to avoid not applying rto_min incl. new time format (bsc#1160939)
- systemd: order start wicked after network-pre.target and openvswitch.service start
- packaging: use pkgconfig(libsystemd) instead of systemd-devel
- misc bug fixes by Malte Kraus including undefined behaviour, memory access alignment
- corrections, use-after-free, missed initialization and format errors</changelog>
  <changelog author="mt@suse.com" date="1583323200">- version 0.6.63
- spec: fix old libwicked package provides/obsoletes (bsc#1165180)
- ipv6: support to apply stable secret ifsysctl (jsc#SLE-6960)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1601467200">- version 0.6.64
- avoid incomplete ifdown/timeout on route deletion error (bsc#1174099)
- dhcp4: add DHCLIENT_CREATE_CID to ifcfg (jsc#SLE-15770)
- wicked: fixes to ifreload on port changes (bsc#1168155,bsc#1172082)
- team: fix schema to use correct hwaddr_policy property (boo#1171234)
- team: enable ipv6 on ports when nsna_ping linkwatch is used (bsc#959556)</changelog>
  <changelog author="mt@suse.com" date="1614859200">- version 0.6.65
- ifconfig: differentiate if to re-trigger dad on address updates (bsc#1177215)
- client: parse sysctl files in the correct order (bsc#1181186)
- ifup: fix for set up with unenslave from unconfigured master (boo#954329)
- rpm: prepare for new builds using usrmerged rpm macro (boo#1029961)
- rpm: Let wicked-service also provide service(network)
- cleanup: remove obsolete use-nanny=false (gh#openSUSE/wicked#815)
- dbus: add variant container, generic object-path and uint32 array macros</changelog>
  <changelog author="mt@suse.com" date="1617796800">- dhcp4: discover on reboot timeout after start-delay (bsc#1181812)
  [+ 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
- dhcp6: request nis options on sle15 by default (bsc#1181812)
  [+ 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.6.66
- wireless: migrate to wpa-supplicant v1 DBus interface (bsc#1156920)
  - support multiple networks configurations per interface
  - show connection status and scan-results (bsc#1160654)
  - corrected eap-tls,ttls cetificate handling and open vs. shared
    wep,open,psk,eap-tls,ttls,peap parsing from ifcfg (bsc#1057592)
  - cleanups and several other improvements, see changes
  - updated man ifcfg-wireless manual pages
- nanny: fix identify node owner exit condition
- schema: several xml-schema and dbus/property improvements
- utils: format/parse bitmap to array and string alternatives
- client: expose ethtool --get-permanent-address option
- removed sle15-sp3 patches included in the master sources (bsc#1181812)
  [- 0001-dhcp4-discover-on-reboot-timeout-after-start-delay.1181812.patch]
  [- 0002-dhcp6-request-nis-options-on-sle15-by-default.1181812.patch]</changelog>
  <changelog author="mt@suse.com" date="1633089600">- version 0.6.67
- dbus: install bus config in /usr (bsc#1183407,jsc#SLE-9750)
- logging: log reaped sub-process command and as debug, not error
- ifstatus: Don't show link as "up" without RUNNING flag set
- firewalld: Make the zone assignment permanent (boo#1189560)
- fsm: cleanup and improve ifconfig and ifpolicy access utils
- dbus: cleanup the dbus-service.h file and unused property makros
- cleanup: applied code-spell run typo corrections
- dracut: initial fixes and improved option handling (boo#1182227)</changelog>
  <changelog author="mt@suse.com" date="1636027200">- dbus: config files in /usr shouldn't be marked as config in spec</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1640088000">- version 0.6.68
- sysctl: process sysctl.d directories as in sysctl --system
- sysctl: fix sysctl values for loopback device (bsc#1181163, bsc#1178357)
- dhcp4: add option to set route pref-src to dhcp IP (bsc#1192353)
- cleanup: warnings, time calculations and dhcp fixes (bsc#1188019)
- wireless: reconnect on unexpected wpa_supplicant restart (bsc#1183495)
- tuntap: avoid sysfs attr read error (bsc#1192311)
- ifstatus: fix warning of unexpected interface flag combination (bsc#1192164)</changelog>
  <changelog author="mt@suse.com" date="1642593600">- fsm: fix device rename via yast (bsc#1194392)
  Reset worker config instead to reject a NULL/empty config
  xml node -- introduced in wicked 0.6.67 by commit c2a0385.
  [+ 0001-fsm-fix-device-rename-via-yast-bsc-1194392.patch]</changelog>
</package>
<package pkgid="cb69726a5bb89c7bdef531ef808b4e68f70a567af597aadf8b3208be76d9e4bf" name="wpa_supplicant" arch="x86_64">
  <version epoch="0" ver="2.9" rel="4.33.1"/>
  <changelog author="bwiedemann@suse.com" date="1587124800">- Add restore-old-dbus-interface.patch to fix wicked wlan (boo#1156920)
- Restore fi.epitest.hostap.WPASupplicant.service (bsc#1167331)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1600776000">- Enable SAE support(jsc#SLE-14992).</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1600776001">- Fix spec file for SLE12, use make %{?_smp_mflags} instead of %make_build</changelog>
  <changelog author="sp1ritCS@protonmail.com" date="1601985600">- Add wpa_supplicant-p2p_iname_size.diff -- Limit P2P_DEVICE name to appropriate ifname size
  (https://patchwork.ozlabs.org/project/hostap/patch/20200825062902.124600-1-benjamin@sipsolutions.net/)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1612440000">- Add CVE-2021-0326.patch -- P2P group information processing vulnerability
  (bsc#1181777)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1614427200">- Add CVE-2021-27803.patch -- P2P provision discovery processing vulnerability
  (bsc#1182805)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1614772800">- Fix systemd device ready dependencies in wpa_supplicant@.service file.
  (see: https://forums.opensuse.org/showthread.php/547186-wpa_supplicant-service-fails-on-boot-succeeds-on-restart?p=2982844#post2982844)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1644494400">- Add CVE-2022-23303_0001.patch, CVE-2022-23303_0002.patch,
  CVE-2022-23303_0003.patch, CVE-2022-23303_0004.patch
  SAE/EAP-pwd side-channel attack update 2
  (CVE-2022-23303, CVE-2022-23304, bsc#1194732, bsc#1194733)</changelog>
</package>
<package pkgid="0d1c4f8322e926d2075978d2628056d9546d9df90a450d4352b81fc250c6beb9" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.14.3_06" rel="150300.3.18.2"/>
  <changelog author="carnold@suse.com" date="1631016000">- bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in
  XENMAPSPACE_grant_table handling (XSA-384)
  xsa384.patch
- Upstream bug fixes (bsc#1027519)
  61001231-x86-work-around-GNU-ld-2-37-issue.patch
  611a7e38-x86-CET-shstk-WARN-manipulation.patch
  611cba4e-VT-d-Tylersburg-errata-more-steppings.patch
  611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch
  6128a856-gnttab-radix-tree-node-init.patch
  61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces
    credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch)
  6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch)
  6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch)
  61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch)
  6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch)
  6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch)
  612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch)
  612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch)
  612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch)
  612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch)
  6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch
  6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch)
  6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch)
  61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch)</changelog>
  <changelog author="carnold@suse.com" date="1631534400">- Update to Xen 4.14.3 bug fix release (bsc#1027519)
  xen-4.14.3-testing-src.tar.bz2
- Drop patches contained in new tarball
  608676f2-VT-d-register-based-invalidation-optional.patch
  60a27288-x86emul-gas-2-36-test-harness-build.patch
  60af933d-x86-gcc11-hypervisor-build.patch
  60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch
  60afe617-x86-TSX-minor-cleanup-and-improvements.patch
  60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch
  60be0e24-credit2-pick-runnable-unit.patch
  60be0e42-credit2-per-entity-load-tracking-when-continuing.patch
  60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch
  60bf9e19-Arm-create-dom0less-domUs-earlier.patch
  60bf9e1a-Arm-boot-modules-scrubbing.patch
  60bf9e1b-VT-d-size-qinval-queue-dynamically.patch
  60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch
  60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch
  60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch
  60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch
  60bfa904-AMD-IOMMU-wait-for-command-slot.patch
  60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch
  60c0bf86-x86-TSX-cope-with-deprecation.patch
  60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch
  60c8de6e-osdep_xenforeignmemory_map-prototype.patch
  60d49689-VT-d-undo-device-mappings-upon-error.patch
  60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch
  60d496d6-VT-d-clear_fault_bits-should-clear-all.patch
  60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch
  60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch
  61001231-x86-work-around-GNU-ld-2-37-issue.patch
  61122ac6-credit2-avoid-spuriously-picking-idle.patch
  611a7e38-x86-CET-shstk-WARN-manipulation.patch
  611cba4e-VT-d-Tylersburg-errata-more-steppings.patch
  611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch
  6126339d-AMD-IOMMU-global-ER-extending.patch
  6126344f-AMD-IOMMU-unity-map-handling.patch
  61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch
  6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch
  6126349a-AMD-IOMMU-rearrange-reassignment.patch
  612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch
  612634c3-x86-p2m-introduce-p2m_is_special.patch
  612634dc-x86-p2m-guard-identity-mappings.patch
  612634f4-x86-mm-widen-locked-region-in-xatp1.patch
  6126350a-gnttab-release-mappings-preemption.patch
  6126351f-gnttab-replace-mapkind.patch
  6126353d-gnttab-get-status-frames-array-capacity.patch
  61263553-Arm-restrict-maxmem-for-dom0less.patch
  6128a856-gnttab-radix-tree-node-init.patch
  xsa384.patch</changelog>
  <changelog author="carnold@suse.com" date="1633521600">- bsc#1191363 - VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs
  not deassigned correctly (XSA-386)
  615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1633953600">- Upstream bug fixes (bsc#1027519)
  6138b7a1-x86-spec-ctrl-split-diagnostics-line.patch
  6138b7a2-x86-AMD-enum-speculative-hints.patch
  6138b7a3-x86-AMD-use-newer-SSBD.patch
  6139f1b1-x86-spec-ctrl-print-AMD-features.patch
  6148453b-VT-d-hidden-devices-unmap.patch
  6148455f-VT-d-PCI-segment-numbers-16-bits.patch
  61532102-PCI-bridge-with-subord-bus-0xFF.patch</changelog>
  <changelog author="carnold@suse.com" date="1636545600">- bsc#1192554 - VUL-0: CVE-2021-28706: xen: guests may exceed their
  designated memory limit (XSA-385)
  xsa385.patch
- bsc#1192557 - VUL-0: CVE-2021-28704,CVE-2021-28707,CVE-2021-28708:
  xen: PoD operations on misaligned GFNs (XSA-388)
  xsa388-1.patch
  xsa388-2.patch
- bsc#1192559 - VUL-0: CVE-2021-28705,CVE-2021-28709: xen: issues
  with partially successful P2M updates on x86 (XSA-389)
  xsa389.patch</changelog>
  <changelog author="jbeulich@suse.com" date="1638187200">- Upstream bug fixes (bsc#1027519)
  61655b5a-AMD-IOMMU-hidden-devices-flush.patch
  616d66bd-x86-HVM-cleanup-after-failed-viridian_vcpu_init.patch
  616e7cfe-x86-paging-restrict-paddr-width-reported.patch
  618289da-x86-shstk-fix-with-XPTI-active.patch
  619b7ac9-harden-assign_pages.patch
  619b8cb0-x86-PoD-misaligned-GFNs.patch
  619b8cb1-x86-PoD-intermediate-page-orders.patch
  619b8cb2-x86-P2M-set-partial-success.patch
- Drop xsa patches in favor of upstream versions
  xsa385.patch
  xsa388-1.patch
  xsa388-2.patch
  xsa389.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1641297600">- Collect active VM config files in the supportconfig plugin
  xen-supportconfig</changelog>
  <changelog author="jbeulich@suse.com" date="1641816000">- bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains an sriov device
  61bc429f-revert-hvmloader-PA-range-should-be-UC.patch
- Upstream bug fixes (bsc#1027519)
  61b31d5c-x86-restrict-all-but-self-IPI.patch
  61b88e78-x86-CPUID-TSXLDTRK-definition.patch
  61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch</changelog>
  <changelog author="carnold@suse.com" date="1641988800">- bsc#1191668 - L3: issue around xl and virsh operation - virsh
  list not giving any output
  libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch
  libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch</changelog>
  <changelog author="carnold@suse.com" date="1642075200">- bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm:
  guest_physmap_remove_page not removing the p2m mappings (XSA-393)
  xsa393.patch
- bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS
  Xen while unmapping a grant (XSA-394)
  xsa394.patch
- bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of
  passed-through device IRQs (XSA-395)
  xsa395.patch</changelog>
</package>
<package pkgid="6e4ba7236fc38e4e9636c66fb899776961815b7a8104bd9068f6d10d082d3586" name="xfsprogs" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="4.52.1"/>
  <changelog author="ailiop@suse.com" date="1611835200">- mkfs.xfs: if either sunit or swidth is nonzero, the other must be as
  well (bsc#1085917, bsc#1181535)
  * Add xfsprogs-mkfs.xfs-if-either-sunit-or-swidth-is-nonzero-the-ot.patch</changelog>
  <changelog author="ailiop@suse.com" date="1611835201">- mkfs.xfs: fix ASSERT on too-small device with stripe geometry
  (bsc#1181536)
  * Add xfsprogs-mkfs.xfs-fix-ASSERT-on-too-small-device-with-stripe-.patch</changelog>
  <changelog author="ailiop@suse.com" date="1614340800">- xfsprogs: split libhandle1 into a separate package, since nothing
  within xfsprogs dynamically links against it. The shared library
  is still required by xfsdump as a runtime dependency.</changelog>
  <changelog author="ailiop@suse.com" date="1627473600">- xfs_repair: check plausibility of root dir pointer before trashing it
  (bsc#1188651)
  * Add xfsprogs-xfs_repair-refactor-fixed-inode-location-checks.patch
  * Add xfsprogs-xfs_repair-check-plausibility-of-root-dir-pointer-be.patch</changelog>
  <changelog author="ailiop@suse.com" date="1629374400">- xfs_bmap: remove -c from manpage (bsc#1189552)
- xfs_bmap: don't reject -e (bsc#1189552)
  * Add xfsprogs-xfs_bmap-remove-c-from-manpage.patch
  * Add xfsprogs-xfs_bmap-don-t-reject-e.patch</changelog>
  <changelog author="ailiop@suse.com" date="1633694400">- xfs_io: add label command (bsc#1191500)
  * Add xfsprogs-xfs_io-add-label-command.patch</changelog>
  <changelog author="ailiop@suse.com" date="1634644800">- xfsprogs: Remove barrier/nobarrier mount options from xfs.5
  (bsc#1191675)
  * Add xfsprogs-man-Remove-barrier-nobarrier-mount-options-from.patch</changelog>
  <changelog author="ailiop@suse.com" date="1636459200">- xfs_quota: state command should report ugp grace times (bsc#1189983)
  * Add xfsprogs-xfs_quota-display-warning-limits-when-printing-quota.patch
  * Add xfsprogs-xfs_quota-state-command-should-report-ugp-grace-time.patch</changelog>
  <changelog author="ailiop@suse.com" date="1636459201">- xfs_admin: support external log devices (bsc#1189984)
  * Add xfsprogs-xfs_admin-support-external-log-devices.patch</changelog>
  <changelog author="ddiss@suse.com" date="1636545600">- xfsprogs-devel: add libhandle1 dependency following split
  (bsc#1191566)</changelog>
</package>
<package pkgid="be6f330612f62690feb8c66771c779badb7dc6c1f0aecedd1dc17258c7fdcec8" name="xkeyboard-config" arch="noarch">
  <version epoch="0" ver="2.23.1" rel="3.9.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1496404800">- Update to version 2.21:
  + Two "Hausa" layout variants with identical descriptions
  + Fixed RALT config of de(T3)
  + Descriptions formatting, typos and mistakes v2
  + two new layouts "Russian (Germany, recommended)" and "Russian (Germany,
    transliteration)" for german keyboards
  + Updated apl stuff
  + Updated apl version
  + Added it(fur)
  + Updated translations (broken with prev commit)
  + Add missing letter I? to French (Togo) keyboard and update language list
  + Duplicate "Malay (Jawi)" entry
  + Update to lk(us)
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Amending typo
  + English (Canada) input source is missing the left backslash key
  + UK is not an exception any more
  + Missing closing bracket on keyboard layout: Slovak (extended backslash),
    Slovak (querty, extended backslash)
  + Adding Sarala Telugu Keyboard layout.
  + steelseries apex300 geometry</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1507204800">- Update to version 2.22:
  + typofix tel-sarala key layout
  + Whitelist Indian keyboard layouts. #101532
  + Enable level3 ralt_switch by default in Kazakh (ext) layout.
  + Extend more keys in Kazakh (ext) layout.
  + Add "AltGr" back into the description for altgr-intl layouts
  + Added Old Hungarian layout
  + ctrl: add missing modifier_map
  + Add grp:menu_switch
  + adds the shortDescription for es-cat and es-ast layouts
  + Added Friulian translation
  + Missing fur in ALL_LINGUAS added
  + Add a Arabic version of Jawi keyboard layout and it's own phonetic version
  + Adding Finnish Dvorak layout
  + Add Ladin layout for it and de keyboards
  + Double Russian fixed
  + Possible typo in word "lever"
  + Typo for Dell latitude
  + Choose only one between "behavior" and "behaviour"
  + Typo in "non-breakable space"
  + Spelling fix in guillemets
  + Add Swedish sv_dvorak based on us dvorak-intl
  + fixed nontranslatable description and shortDescription tags
  + Prerelease translations sync
  + Added a bit of explanation for diff, to make it clear
  + Fixed old Hungarian
  + Replaced NoSymbol with dead_belowmacron in default German keyboard layout
  + Added Polyglot and Reactionary Russian layout</changelog>
  <changelog author="sndirsch@suse.com" date="1507636800">- n_suse-ctrl-alt-bksp-terminate.patch
  * removed the hunk, which made Shift-RCTL and Shift-RALT the
    default Compose key (bsc#1059438)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511179200">- Add U_xkeyboard-config_fix-typo-hungarian.patch: Fix typo in
  hungarian (fdo#103123).</changelog>
  <changelog author="sndirsch@suse.com" date="1517400000">- Update to version 2.23
  * Added it(intl), it(scn) and us(scn)
  * Minor fidvorak adjustment
  * Typo fixed
  * Refreshed the default Arabic keyboard layout
  * more robust comment handling
  * replace '?' (0x10002bc) with '?' (0x100055a) in armenian layout
  * Add polish layout for use glagolica script
  * Use default compose key with Finnish keyboard
  * incomplete Finnish fix patch
  * Prerelease translation sync
  * Added International Phonetic Alphabet
- supersedes U_xkeyboard-config_fix-typo-hungarian.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1517486400">- Update to version 2.23.1
  * Fixing the build</changelog>
  <changelog author="sndirsch@suse.com" date="1517572800">- U_Fix-typo-in-Polish-symbols-file.patch
  * fixes broken polish symbols file (fdo#104904)</changelog>
  <changelog author="sndirsch@suse.com" date="1548936000">- U_Map-evdev-keycodes-KEY_RFKILL-and-KEY_WWAN-to-XF86RF.patch
  * fixes missing mappings for evdev keys KEY_RFKILL and KEY_WWAN
    (boo#1123784)</changelog>
  <changelog author="sndirsch@suse.com" date="1570881600">- U_Updating-Old-Hungarian.patch
  * fix capslock in Old Hungarian layout (boo#1153774)</changelog>
  <changelog author="sndirsch@suse.com" date="1633176000">- U_Fix-media-keys-lag-on-ABNT2-keyboard.patch
  * fixes wrong keyboard mapping causing input delays with ABNT2
    keyboards (bsc#1191242)</changelog>
</package>
<package pkgid="5f91b6a969d54e3aaf40bef4f88b79ee5fcea8b8d6fd003a5af508d9bed7168d" name="xmlstarlet" arch="x86_64">
  <version epoch="0" ver="1.6.1" rel="1.30"/>
  <changelog author="pascal.bleser@opensuse.org" date="1306929600">- update to 1.2.0:
  * implement ed --update --expr
  * use top-level namespace definitions from first input file, this should
    remove the need to define namespaces on the command line with -N in most
    cases
  * select exits with 0 only if result is non-empty (SF#3155702)
  * add -Q to select, like grep's -q
  * add column number to error messages
  * restore input context (lost in version 1.0.3) to error messages
    (SF#3305659)
  * print extra string information in error messages
  * use entity definitions from dtd (SF#3305659)
  * add --net option to c14n, ed, fo, and val (SF#1071398)
  * remove --catalog from tr --help message since it isn't actually supported
  * add --elif and --else to sel --help message</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1307016000">- add xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch to fix builds
  on distros that use libxml2 versions prior to 2.7.8 and which hence don't
  support XML_SAVE_WSNONSIG</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1311336000">- update to 1.2.1:
  * check for NULL nodeset result (Bugs #3323189, #3323196)
  * "-" was being confused with --elif
  * generated XSLT should also have automatic namespaces
  * allow -N after other option (Bug #3325166)
  * namespace values were being registered as prefixes
  * avoid segfault when asked to move namespace nodes
  * missing newline in ed --help message
  * don't use XML_SAVE_WSNONSIG #if libxml &lt; 2.7.8 (Bug #3310475)
- dropped patch "xmlstarlet-backport_libxml2_2_7_8_XML_SAVE_WSNONSIG.patch",
  was merged upstream</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1317556800">- update to 1.3.0:
  * avoid ASCII CRs in UTF-16/32 text
  * --value-of outputs concat values of all nodes (sf#2563866)
  * encode special chars for ed -u -x
  * allow use of exslt functions in ed -u -x
  * add --var to select (allow --var &lt;name&gt;=&lt;value&gt; as well as --var &lt;name&gt;
    &lt;value&gt; --break)
  * work around libxml bug that passes bogus data to error handler (sf#3362217)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1329825600">- update to 1.3.1:
  * handle multiple values for --value-of properly (sf#2563866)
  * substitute external entities (sf#3467320)
  * pyx output needs space between attribute name and value (sf#3440797)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1350561600">- update to 1.4.0:
  * ed subcommand:
  - relative XPaths are now handled correctly (Bug #3527850)
  - the last nodeset inserted by an edit operation can be
    accessed as the XPath variable $prev (or $xstar:prev)
  - add --var option to define XPath variables
  - allow ed -u -x to insert nodesets instead of converting to
    string
  - remove hard limit for number of edit operations (Bug
    [#3488240])
  * pyx now handles namespaces correctly</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1355659200">- update to 1.4.1:
  * avoid segfault when attempting to edit the document node</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1373284800">- update to 1.5.0:
  - Bugs:
  - avoid segfault on pyx non-existant file
  - fix unescaping of entities straddling 4K byte boundary (Bug #102)
  - Enhancements:
  - unescape hex entities (&amp;#xXX;)
  - give a helpful message if doc has default namespace and
    nothing matched
  - add "_" and "DEFAULT" as names for document's top-level
    default namespace
  - Adding a global quiet option
  - ed: Allow omitting value argument to create empty element.
  - use default attribute values in sel subcommand
- changes from 1.4.2:
  - pyx: avoid segfault on documents with multiple attributes (Bug
    [#3595212])</changelog>
  <changelog author="toms@opensuse.org" date="1413201600">- SPEC file changes
  - Added link from /usr/bin/xml to /usr/bin/xmlstarlet as other
    distributions do the same
  - Did the same for the manpage</changelog>
  <changelog author="mpluskal@suse.com" date="1462276800">- Update to 1.6.1:
  * handle unicode arguments under Windows
- Changes for 1.6.0:
  * get rid of "helpful" message about namespaces
  * update user guide
  * Enhancements:
    + add --stop option to val
    + add global option --no-doc-namespace
  * Build:
    + let the make install target succeed even if docs aren't
    built.
- Cleanup spec file with spec-cleaner
- Cleanup dependencies
- Refresh xmlstarlet-xml_depyx.c.diff</changelog>
</package>
<package pkgid="04dadd4f1e9486e6387b7eb14cda147038824bfb4cbe02128fcf00a5b4697cdd" name="xtables-plugins" arch="x86_64">
  <version epoch="0" ver="1.8.7" rel="1.1"/>
  <changelog author="jengelh@inai.de" date="1542110400">- Update to new upstream release 1.8.2
  * Fix incorrect handling of various targets and options in
    iptables-nft,ebtables-nft,arptables-nft.</changelog>
  <changelog author="kstreitova@suse.com" date="1554379200">- Add iptables-1.8.2-dont_read_garbage.patch that fixes a situation
  where 'iptables -L' reads garbage from the struct as the kernel
  never filled it in the bugged case. This can lead to issues like
  mapping a few TiB of memory [bsc#1106751].</changelog>
  <changelog author="jengelh@inai.de" date="1558526400">- Add 0001-include-fix-build-with-kernel-headers-before-4.2.patch,
  0001-include-extend-the-headers-conflict-workaround-to-in.patch
  to fix build with older linux-glibc-devel. [boo#1132821]</changelog>
  <changelog author="jengelh@inai.de" date="1559044800">- Update to new upstream release 1.8.3
  * ebtables: Fix rule listing with counters
  * ebtables-nft: Support user-defined chain policies
- Remove 0001-include-extend-the-headers-conflict-workaround-to-in.patch
  0001-include-fix-build-with-kernel-headers-before-4.2.patch
  (upstreamed)</changelog>
  <changelog author="kstreitova@suse.com" date="1567771200">- add missing Provides/Obsoletes for the renamed package
  iptables-backend-nft (was iptables-nft)</changelog>
  <changelog author="kstreitova@suse.com" date="1569844800">- Add Conflicts with iptables-nft = 1.6.2 as during the update to
  iptables 1.8 ip6tables-restore-translate, ip6tables-translate,
  iptables-restore-translate and iptables-translate were moved from
  iptables-nft subpackage (now iptables-backend-nft) to the main
  package. So we need to add a conflict here otherwise we hit file
  conflicts error during the update.</changelog>
  <changelog author="jengelh@inai.de" date="1575288000">- Update to release 1.8.4
  * Fix for wrong counter format in `ebtables-nft-save -c` output.
  * Print typical iptables-save comments in arptables- and
    ebtables-save, too.
  * xt_owner: add --suppl-groups option
  * Remove support for /etc/xtables.conf
  * Restore support for "-4" and "-6" options in rule lines.</changelog>
  <changelog author="jengelh@inai.de" date="1591185600">- Update to release 1.8.5
  * IDLETIMER: Add alarm timer option
  * nft: CT: add translation for NOTRACK
- Drop iptables-apply-mktemp-fix.patch (seemingly applied)</changelog>
  <changelog author="jengelh@inai.de" date="1604232000">- Update to release 1.8.6
  * iptables-nft had pointlessly added "bitwise" expressions to
    each IP address match, needlessly slowing down run-time
    performance (by 50% in worst cases).
  * iptables-nft-restore: Support basechain policy value of "-"
    (indicating to not change the chain's policy).
  * nft-translte: Fix translation of ICMP type "any" match.</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 1.8.7
  * iptables-nft:
  * Improved performance when matching on IP/MAC address prefixes
    if the prefix is byte-aligned. In ideal cases, this doubles
    packet processing performance.
  * Dump user-defined chains in lexical order. This way ruleset
    dumps become stable and easily comparable.
  * Avoid pointless table/chain creation. For instance,
    `iptables-nft -L` no longer creates missing base-chains.</changelog>
</package>
<package pkgid="585eca29aee1d8a6c0fddea67661aedfa5c8bc30160e12e6d57ca92e6e6b11fe" name="xz" arch="x86_64">
  <version epoch="0" ver="5.2.3" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1455451200">- Do not split out lang_package conditional, used in sle10 out of support</changelog>
  <changelog author="mpluskal@suse.com" date="1457870400">- Install xznew with correct permissions (boo#970842)</changelog>
  <changelog author="astieger@suse.com" date="1483185600">- xz 5.2.3:
  * xz: always close a file before trying to delete it to avoid
    problems on some operating system and file system combinations.
  * C99/C11 conformance fixes to liblzma. The issues affected at
    least some builds using link-time optimizations.
  * Fixed bugs in the rarely-used function lzma_index_dup().
  * Use of external SHA-256 code is now disabled by default.
    It can still be enabled by passing --enable-external-sha256
  * Changed CPU core count detection to use sched_getaffinity() on
    GNU/Linux and GNU/kFreeBSD.
  * Fixes to the build-system</changelog>
  <changelog author="adrian@suse.de" date="1487678400">- enable static package by default.
  Needed for AppImageKit</changelog>
  <changelog author="mpluskal@suse.com" date="1498046400">- Simplify spec file conditions
- Clenup profiled building
- Use full lists of files</changelog>
  <changelog author="astieger@suse.com" date="1498392000">- fix CentOS/RHEL builds after clean-up</changelog>
  <changelog author="olaf@aepfle.de" date="1498824000">- Really use the selfdefined CFLAGS during build to fix build</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- % needs to be encoded in description; adjust weird indent there
  as well. Expand LZMA in summaries.</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1558440000">- add SUSE-Public-Domain licence as some parts of xz utils (liblzma,
  xz, xzdec, lzmadec, documentation, translated messages, tests,
  debug, extra directory) are in public domain licence [bsc#1135709]</changelog>
</package>
<package pkgid="bd751600b52a1b0770d07b2c8db105c5fc76c7f5b7b162ce28ac344d89f6682d" name="yast2-logs" arch="x86_64">
  <version epoch="0" ver="4.3.68" rel="150300.3.17.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1617019200">- Add a AbstractWidget#displayed? to determine whether
  a widget is in the UI (bsc#1184115).
- 4.3.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1618228800">- Add a default value for file_path argument in ::new and ::load
  methods of CFA::LoginDefs class.</changelog>
  <changelog author="dgonzalez@suse.com" date="1620043200">- Do not crash when a client execution return false
  (related to bsc#1185561, and bsc#1180954).
- 4.3.61</changelog>
  <changelog author="jreidinger@suse.com" date="1622721600">- revert disable of hibernation based on product and virtual
  machines (bsc#1184470)
- 4.3.62</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1623153600">- Ignore sysctl configuration files that do not have the .conf
  extension. The only exception are kernel files
  (/boot/sysctl.conf-*) (bsc#1187018).
- 4.3.63</changelog>
  <changelog author="shundhammer@suse.com" date="1626264000">- Don't crash with UI exception in Progress.rb if a popup is in the way
  (bsc#1187676)
- 4.3.64</changelog>
  <changelog author="dgonzalez@suse.com" date="1626350400">- Do not escape "$" in URL paths (bsc#1187581).
- 4.3.65</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1640001600">- Do not reinitialize the packaging system during offline
  upgrade (bsc#1193784 and bsc#1192437).
- 4.3.66</changelog>
  <changelog author="snwint@suse.com" date="1645012800">- do not strip trailing white space in XML elements (bsc#1195910)
- 4.3.67</changelog>
  <changelog author="snwint@suse.com" date="1645099200">- do not strip surrounding white space in CDATA XML elements (bsc#1195910)
- 4.3.68</changelog>
</package>
<package pkgid="ee9e4c7980e4c5e670e88ffe5d4b2760f1f057431e0f307ec22709df00713bcd" name="yast2-schema-micro" arch="x86_64">
  <version epoch="0" ver="4.4.10" rel="150300.1.1"/>
  <changelog author="jreidinger@suse.com" date="1642593600">- initial package to have dedicated limited schema for Micro
  product (jsc#SLE-18820)
- 4.4.9</changelog>
  <changelog author="jreidinger@suse.com" date="1642766400">- Adapt dependencies for SLE15 SP3 as micro is based on it</changelog>
  <changelog author="kanderssen@suse.com" date="1643198400">- Synced version with default schema (related to jsc#SLE-22069).
- 4.4.10</changelog>
</package>
<package pkgid="793ffff57d2ef2e09ea871a9c253a712e3f3da0433b2d71f34ee429f4718528f" name="zisofs-tools" arch="x86_64">
  <version epoch="0" ver="1.0.8" rel="1.27"/>
  <changelog author="uli@suse.de" date="1023969600">- update -&gt; 1.0.3 (cosmetic)</changelog>
  <changelog author="nadvornik@suse.cz" date="1059134400">- updated to 1.0.4
- added BuildRoot</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- add %defattr</changelog>
  <changelog author="nadvornik@suse.cz" date="1094040000">- updated to 1.0.6</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="rguenther@suse.de" date="1175169600">- add zlib-devel BuildRequires</changelog>
  <changelog author="dimstar@opensuse.org" date="1266235200">- Update to version 1.0.8:
  + This release fixes the --sloppy option, which was documented
    but did not work.
- Spec cleanup.</changelog>
  <changelog author="jengelh@medozas.de" date="1288440000">- Use %_smp_mflags</changelog>
  <changelog author="mhrusecky@suse.com" date="1370520000">- require /usr/bin/mkisofs instead of mkisofs package</changelog>
  <changelog author="jengelh@inai.de" date="1412510400">- Use Source URLs and remove redundant %clean section</changelog>
</package>
<package pkgid="6d6e3b4022e9334cb0f2474f349335a7a1f6bf1e065dce78465978dedbf308ec" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="3.26.10"/>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
</package>
<package pkgid="64a3445905df00ede4af1a29931bd512f8e00f46cbcf7b8efe75cc575b776aa5" name="zstd" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="1.6.1"/>
  <changelog author="mliska@suse.cz" date="1556280000">- Use FAT LTO objects in order to provide proper static library (boo#1133297).</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Update description with 1.4.0 statistics.</changelog>
  <changelog author="idonmez@suse.com" date="1560513600">- Remove googletest-devel BuildRequires and pzstd-global-gtest.patch
  because we want zstd in ring0 (due to rpm's zstd payload support)
  Since googletest is only used in build time (it's for testing after
  all), this should be fine.</changelog>
  <changelog author="dimstar@opensuse.org" date="1562846400">- Add baselibs.conf: libarchive gained zstd support and provides
  - 32bit libraries. This means, zstd also needs to provide -32bit
  libs.</changelog>
  <changelog author="mpluskal@suse.com" date="1563796800">- Update to version 1.4.1:
  * bug: Fix data corruption in niche use cases by @terrelln (#1659)
  * bug: Fuzz legacy modes, fix uncovered bugs by @terrelln (#1593, #1594, #1595)
  * bug: Fix out of bounds read by @terrelln (#1590)
  * perf: Improve decode speed by ~7% @mgrice (#1668)
  * perf: Slightly improved compression ratio of level 3 and 4 (ZSTD_dfast) by @cyan4973 (#1681)
  * perf: Slightly faster compression speed when re-using a context by @cyan4973 (#1658)
  * perf: Improve compression ratio for small windowLog by @cyan4973 (#1624)
  * perf: Faster compression speed in high compression mode for repetitive data by @terrelln (#1635)
  * api: Add parameter to generate smaller dictionaries by @tyler-tran (#1656)
  * cli: Recognize symlinks when built in C99 mode by @felixhandte (#1640)
  * cli: Expose cpu load indicator for each file on -vv mode by @ephiepark (#1631)
  * cli: Restrict read permissions on destination files by @chungy (#1644)
  * cli: zstdgrep: handle -f flag by @felixhandte (#1618)
  * cli: zstdcat: follow symlinks by @vejnar (#1604)
  * doc: Remove extra size limit on compressed blocks by @felixhandte (#1689)
  * doc: Fix typo by @yk-tanigawa (#1633)
  * doc: Improve documentation on streaming buffer sizes by @cyan4973 (#1629)
  * build: CMake: support building with LZ4 @leeyoung624 (#1626)
  * build: CMake: install zstdless and zstdgrep by @leeyoung624 (#1647)
  * build: CMake: respect existing uninstall target by @j301scott (#1619)
  * build: Make: skip multithread tests when built without support by @michaelforney (#1620)
  * build: Make: Fix examples/ test target by @sjnam (#1603)
  * build: Meson: rename options out of deprecated namespace by @lzutao (#1665)
  * build: Meson: fix build by @lzutao (#1602)
  * build: Visual Studio: don't export symbols in static lib by @scharan (#1650)
  * build: Visual Studio: fix linking by @absotively (#1639)
  * build: Fix MinGW-W64 build by @myzhang1029 (#1600)
  * misc: Expand decodecorpus coverage by @ephiepark (#1664)</changelog>
  <changelog author="bwiedemann@suse.com" date="1564142400">- Update to version 1.4.2:
  * bug: Fix bug in zstd-0.5 decoder by @terrelln (#1696)
  * bug: Fix seekable decompression in-memory API by @iburinoc (#1695)
  * bug: Close minor memory leak in CLI by @LeeYoung624 (#1701)
  * misc: Validate blocks are smaller than size limit by @vivekmig (#1685)
  * misc: Restructure source files by @ephiepark (#1679)</changelog>
  <changelog author="bwiedemann@suse.com" date="1564488000">- Add disk _constraints to fix ppc64le build</changelog>
  <changelog author="idonmez@suse.com" date="1566302400">- Update to version 1.4.3
  * bug: Fix Dictionary Compression Ratio Regression (#1709)
  * bug: Fix Buffer Overflow in v0.3 Decompression (#1722)
  * build: Add support for IAR C/C++ Compiler for Arm (#1705)
  * misc: Add NULL pointer check in util.c (#1706)</changelog>
  <changelog author="idonmez@suse.com" date="1572955200">- Update to version 1.4.4
  * perf: Improved decompression speed, by &gt; 10%
  * perf: Better compression speed when re-using a context
  * perf: Fix compression ratio when compressing large files with
    small dictionary
  * perf: zstd reference encoder can generate RLE blocks
  * perf: minor generic speed optimization
  * api: new ability to extract sequences from the parser for analysis
  * api: fixed decoding of magic-less frames
  * api: fixed ZSTD_initCStream_advanced() performance with fast modes
  * cli: Named pipes support
  * cli: short tar's extension support
  * cli: command --output-dir-flat=DIE , generates target files into
    requested directory
  * cli: commands --stream-size=# and --size-hint=#
  * cli: command --exclude-compressed
  * cli: faster -t test mode
  * cli: improved some error messages
  * cli: fix rare deadlock condition within dictionary builder
  * misc: Improved documentation : ZSTD_CLEVEL, DYNAMIC_BMI2,
    ZSTD_CDict, function deprecation, zstd format
  * misc: fixed educational decoder : accept larger literals section,
    and removed UNALIGNED() macro
- Refresh pzstd.1.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1615464000">- Add 0001-PATCH-Use-umask-to-Constrain-Created-File-Permission.patch
  fixing (CVE-2021-24031, bsc#1183371) and (CVE-2021-24032, bsc#1183370).
  Use umask() to constrain created file permission.</changelog>
</package>
<package pkgid="434b943153ab4dc51a9540688f3ac4c9e91dd8189a486bd01b8cfcc5d81223e8" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.51" rel="27.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
</package>
<package pkgid="9bba87d68bbc428be3374a90a3fb22d93e5d6519f58dcf9a1cf9db970f5aae6d" name="zypper-needs-restarting" arch="noarch">
  <version epoch="0" ver="1.14.51" rel="27.1"/>
  <changelog author="ma@suse.de" date="1610452800">- Fix source-download commnds help (bsc#1180663)
- man: Recommend to use the --non-interactive global option
  rather than the command option -y (bsc#1179816)
- Extend apt packagemap (fixes #366)
- --quitet: Fix install summary to write nothing if there's
  nothing todo (bsc#1180077)
- Prefer /run over /var/run.
- version 1.14.42</changelog>
  <changelog author="ma@suse.de" date="1614168000">- doc: give more details about creating versioned package locks
  (bsc#1181622)
- man: Document synonymously used patch categories (bsc#1179847)
- version 1.14.43</changelog>
  <changelog author="ma@suse.de" date="1619784000">- Rephrase needs-rebooting help and messages.
  Try to point out that the need to reboot was not necessarily
  triggered by the current transaction.
- man page: Recommend the needs-rebooting command to test whether
  a system reboot is suggested.
- patch: Let a patch's reboot-needed flag overrule included packages
  (bsc#1183268)
- Quickfix setting "openSUSE_Tumbleweed" as default platform for
  "MicroOS" (bsc#1153687)
  This fixes the guessed platform for "obs://&lt;project&gt;/" URLs.
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias (bsc#1182372)
- version 1.14.44</changelog>
  <changelog author="ma@suse.de" date="1622635200">- Add hints to 'trust GPG key' prompt.
- Add report when receiving new package signing keys from a
  trusted repo (bsc#1184326)
- Added translation using Weblate (Kabyle)
- version 1.14.45</changelog>
  <changelog author="ma@suse.de" date="1623326400">- Link all executables with -pie (bsc#1186447)
- Tag PTF packages in the status column (bsc#1186503)
  Like retracted packages, a program temporary fix must be
  explicitly selected and will otherwise not be considered in
  dependency resolution.
- BuildRequires:  libzypp-devel &gt;= 17.26.1.
- version 1.14.46</changelog>
  <changelog author="ma@suse.de" date="1625140800">- Quick fix obs:// platform guessing for Leap (bsc#1187425)
- man: point out more clearly that patches update affected
  packages to the latest version (bsc#1187466)
- version 1.14.47</changelog>
  <changelog author="ma@suse.de" date="1627473600">- Support new reports for singletrans rpm commit.
- BuildRequires:  libzypp-devel &gt;= 17.27.1.
  For lock/query comments.
- Prompt: choose exact match if prompt options are not prefix
  free (bsc#1188156)
- Install summary: Show new and removed packages closer to the
  prompt (fixes #403)
  These packages are usually more interesting than the updated
  ones. In case of doubt less scrolling is needed to see them.
- Add need reboot/restart hint to XML install summary
  (bsc#1188435)
- Add comment option for lock command (fixes #388).
- version 1.14.48</changelog>
  <changelog author="ma@suse.de" date="1630670400">- Avoid calling 'su' to detect a too restrictive sudo user umask
  (bsc#1186602)
- Fix typo in German translation (fixes #395)
- BuildRequires:  libzypp-devel &gt;= 17.28.3.
- version 1.14.49</changelog>
  <changelog author="ma@suse.de" date="1634558400">- Fix compiler warning.
- zypper.conf: New option whether to collect subcommands found in
  $PATH (fixes #379)
  +[subcommand] i
  +
  +##  Whether to look for subcommands in $PATH
  +##
  +## If a subcommand is not found in the zypper_execdir, the wrapper
  +## will look in the rest of your $PATH for it. Thus, it's possible
  +## to write local zypper extensions that don't live in system space.
  +## See section SUBCOMMANDS in the zypper manpage.
  +##
  +## Valid values: boolean
  +## Default value: yes
  +##
  +# seachSubcommandInPath = yes.
- help subcommand: show path of command found in $PATH.
- version 1.14.50</changelog>
  <changelog author="ma@suse.de" date="1640260800">- Singletrans: handle fatal and non-fatal script errors properly.
- Add SingleTransReportReceiver.
- Immediately write out additional rpm output.
- BuildRequires:  libzypp-devel &gt;= 17.29.0.
  Need SingleTransReport and immediate rpm script output reports.
- version 1.14.51</changelog>
</package>
</otherdata>